Senior detection engineer

3 weeks ago

Singapore Marriott International Full time

Marriott InternationalThis is a detection engineering role that leverages knowledge of monitoring, analyzing, detecting, and responding to cyber events and incidents to develop and implement effective monitoring and alerting for information systems and networks. This role is responsible for developing and tuning Security Information and Event Management (SIEM) and User Entity and Behavior Analytics (UEBA) content to monitor critical IT infrastructure and application logged events to detect cybersecurity and insider threats across the Marriott enterprise. This role produces high-quality documentation pertaining to detection development, monitoring logic, and other content creation tasks. This role will also lead collaboration sessions for security monitoring use case ideation with partners in the cyber security tower and other business units.
CANDIDATE PROFILE
Education and Experience
Required:
Bachelor’s degree in Computer Sciences or related field or equivalent experience/certification
3+ years of collective experience in one or all of the following:Splunk SIEM (Splunk Enterprise Security) threat detection use case development
UEBA use case development for insider threat use case development5+ years of experience in some or all of the following:Experience working in (or with) security functions such as SOC, CIRT, security engineering, risk management, vulnerability management.
Technical infrastructure operations, administration, or systems engineering
Scripting or programming language, including PythonPreferred Skills/Experience:
Current information security certification such as Certified Information Security Manager (CISM), Certified Information Systems Security Professional (CISSP)
Offensive and defensive security certifications such as CEH, IGAC Cyber Defense, OSCP or other related certifications
Splunk Certification, including Splunk Enterprise Security Certified Admin
Use case development experience on the Exabeam platform
Working knowledge of the NIST Cyber Security Framework and ISO/IEC 27001:2022
Working knowledge of the MITRE ATT&CK Framework
Experience with security monitoring use case ideation for business applications and IT infrastructure
Familiaritywith cloud service provider platforms (AWS, Azure, GCP), identity and access management systems, firewalls, next-gen anti-malware, intrusion detection and prevention systems
Experience with Linux, Unix and Microsoft operating systems
Knowledge of IP networking
Experience with a scripting language (*nix shell scripting, Python, Power Shell, etc.) and regular expressions
Solid written and verbal communication skills
Core Responsibilities
Most Often:
Lead collaboration sessions within the cyber security tower and other business units to devise security monitoring use cases. This work entails the collection and collaborative analysis of security accreditation reports, threat models, documented security controls, architecture, and business usage patterns for security monitoring consideration.
Engage and collaborate with other security engineers and architects as needed to keep pace with the evolution of corporate infrastructure and applications and share that knowledge with peers as appropriate.
Document prospective security monitoring use cases with MITRE ATT&CK mappings using standard templates and methodologies. Identified use cases will be reviewed with stakeholders for acceptance sign-off and to move forward with development.
Inform and consult other cyber ops teams of required data onboarding and integrations for use case development.
Develop analytics, correlation searches, dashboards, reports and alerts within the SIEM and UEBA platforms.
Solicit feedback for pre-production security monitoring content through peer review process and user acceptance testing for tuning.
Document developed security monitoring content in a documentation registry using department standard templates and methodologies.
Manage field mapping and transmission of security monitoring alerts to the security incident response platform for SOC analyst consumption as outlined in process documentation.
Provide governance support for the content development function entailing content development standards compliance, change management approvals for SIEM or UEBA content, and lifecycle management of developed security monitoring content.
Service operational requests in queue such as analytics content performance tuning, filtering, search refinement, parsing issues, etc.
Attend SCRUM and prioritization meetings to review and update deliverables.
Less Often:
Contribute to ongoing development and maintenance of documented standards, workflows, and best practices within the cyber threat detection engineering discipline.
Research emerging threats and adversary tactics, techniques, and procedures to understand the threat landscape and to ensure that security monitoring content remains relevant and effective.
Occasional participation in evaluations of new platforms, technologies and methodologies pertaining to cyber threat detection engineering.
MANAGEMENT COMPETENCIES
JOB SUMMARY
Marriott International is an equal opportunity employer. We believe in hiring a diverse workforce and sustaining an inclusive, people-first culture. We are committed to non-discrimination on any protected basis, such as disability and veteran status, or any other basis covered under applicable law.#J-18808-Ljbffr

  • Entry level Site Engineer/ Technician

    1 month ago

    Singapore JL CABLE DETECTION PTE. LTD. Full time

    Roles & Responsibilities(No Experience is required, all training will be provided)We are looking for a self-motivated trainee Site engineer/ Utility Detection Specialist (LCDW/TCDW) at our company. Our trainee engineers will form part of an integrated team and should be comfortable working well with the rest of our admin and drafter teams.To be successful as...

  • Senior detection engineer

    1 month ago

    Singapore Marriott International Full time

    Marriott International This is a detection engineering role that leverages knowledge of monitoring, analyzing, detecting, and responding to cyber events and incidents to develop and implement effective monitoring and alerting for information systems and networks. This role is responsible for developing and tuning Security Information and Event Management...

  • SIEM Detection Engineer

    4 weeks ago

    Singapore SAGL CONSULTING PTE. LTD. Full time

    Roles & ResponsibilitiesOverview:Our client is seeking a skilled and proactive SIEM Detection Engineer to join their cybersecurity team. This role is critical in the engineering, development, and continuous improvement of threat detection use cases within their SIEM platform. The ideal candidate will be responsible for creating and tuning custom detection...

  • Fire Detection Systems Engineer

    3 weeks ago

    Singapore Johnson Controls Full time

    As a Fire Detection Systems Engineer at Johnson Controls, you will be part of our Marine & Offshore Singapore team working on fire detection and suppression related projects. Your responsibilities will include providing pre-sales support to our Sales team, including proposal costing and attending technical clarifications meetings with customers.The role...

  • Process engineer

    3 weeks ago

    Singapore The Chemical Engineer Full time

    Why Patients Need You Whether you are involved in the design and development of manufacturing processes for products or supporting maintenance and reliability, engineering is vital to making sure customers and patients have the medicines they need, when they need them. Working with our innovative engineering team, you'll help bring medicines to the...

  • Senior Physics Engineer

    21 hours ago

    Singapore SMX CIRCULAR ECONOMY PLATFORM PTE. LTD. Full time

    About the RoleWe are seeking an exceptional Senior Physics Engineer to join our team as a Detection Technology Specialist. This is a unique opportunity to lead cutting-edge projects in the development and implementation of innovative detection technologies.Key ResponsibilitiesLeverage your expertise in physics to drive project development from conception to...

  • Senior technical engineer

    1 month ago

    Singapore The Chemical Engineer Full time

    About us At Exxon Mobil, our vision is to lead in energy innovations that advance modern living and a net-zero future. As one of the world’s largest publicly traded energy and chemical companies, we are powered by a unique and diverse workforce fueled by the pride in what we do and what we stand for. The success of our Upstream, Product Solutions and Low...

  • Senior Business Development Manager

    4 days ago

    Singapore JL CABLE DETECTION PTE. LTD. Full time

    Job Overview:As a Senior Business Development Manager at JL CABLE DETECTION PTE. LTD., you will play a pivotal role in driving sales growth and expanding our client base across key sectors, including construction sites managed by JTC, LTA, HDB, and other private entities.Key Responsibilities:- Proactively engage with both new and existing clients to promote...

  • Cybersecurity Engineer

    2 days ago

    Singapore PERCEPT SOLUTIONS PTE. LTD. Full time

    About the RoleAt Percept Solutions, we are seeking an experienced Cybersecurity Engineer to join our team. In this role, you will be responsible for designing and implementing threat detection use-cases within our SIEM system, as well as developing custom rules in our EDR solution. You will also be involved in creating transparency of existing detection...

  • Cybersecurity Threat Detection Specialist

    2 days ago

    Singapore SAGL CONSULTING PTE. LTD. Full time

    SAGL Consulting PTE. LTD. is seeking a highly skilled Cybersecurity Threat Detection Specialist to join their team. This role is critical in the engineering, development, and continuous improvement of threat detection use cases within the SIEM platform.Estimated salary: SGD $120,000 - SGD $180,000 per annum.Job DescriptionThis is an exciting opportunity for...

  • Security engineer, detection

    3 weeks ago

    Singapore OpenAI Full time

    Security Engineer, Detection & Response - Singapore Security - Remote - Singapore About the Team Security is at the foundation of Open AI’s mission to ensure that artificial general intelligence benefits all of humanity. The Security team protects Open AI’s technology, people, and products. We are technical in what we build but are operational in how we...

  • Detection Technology Specialist

    1 week ago

    Singapore SMX CIRCULAR ECONOMY PLATFORM PTE. LTD. Full time

    About the RoleWe are seeking a highly skilled Detection Technology Specialist to join our team at SMX CIRCULAR ECONOMY PLATFORM PTE. LTD.Job SummaryThe successful candidate will lead projects from a hands-on perspective, managing all physical aspects from the detection reader unit, including translating client requirements into detailed detection...

  • Cybersecurity Threat Detection Specialist

    6 days ago

    Singapore SAGL CONSULTING PTE. LTD. Full time

    Cybersecurity Threat Detection SpecialistWe are seeking a highly skilled Cybersecurity Threat Detection Specialist to join our team at SAGL CONSULTING PTE. LTD.About the Role:This is an exciting opportunity for a talented individual to design, develop, and continuously improve threat detection use cases within our Splunk Enterprise Security (ES) platform.Key...

  • Senior engineer

    3 weeks ago

    Singapore AMADA Senior Care Mesa Full time

    OKX will be prioritising applicants who have a current right to work in Singapore, and do not require OKX's sponsorship of a visaWho We AreAt OKX, we believe the future will be reshaped by technology. Founded in 2017, we are revolutionising world systems through our cutting-edge digital asset exchange, Web3 portal and blockchain ecosystems. We reshape...

  • Senior engineer

    1 month ago

    Singapore AMADA Senior Care Mesa Full time

    OKX will be prioritising applicants who have a current right to work in Singapore, and do not require OKX's sponsorship of a visa Who We Are At OKX, we believe the future will be reshaped by technology. Founded in 2017, we are revolutionising world systems through our cutting-edge digital asset exchange, Web3 portal and blockchain ecosystems. We reshape...

  • Cybersecurity Researcher

    1 week ago

    Singapore INNOEDGE LABS PTE. LTD. Full time

    Cybersecurity ResearcherWe are seeking a skilled Cybersecurity Researcher to join our team at InnoEdge Labs PTE. LTD. As a senior vulnerability researcher, you will be responsible for leading research projects and conceptualizing new tools/techniques that enhance the vulnerability discovery process.Your expertise in reverse engineering, bug reporting,...

  • Cybersecurity Threat Detection Specialist

    4 weeks ago

    Singapore SAGL CONSULTING PTE. LTD. Full time

    About SAGL CONSULTING PTE. LTD.Our company is a leading provider of cybersecurity solutions, dedicated to helping organizations protect themselves against the ever-evolving threat landscape. We are seeking an experienced Cybersecurity Threat Detection Specialist to join our team in Singapore.Job DescriptionWe are looking for a skilled and proactive...

  • Cybersecurity Threat Detection Specialist

    4 weeks ago

    Singapore SAGL CONSULTING PTE. LTD. Full time

    SAGL Consulting PTE. LTD.Cybersecurity Threat Detection SpecialistEstimated Salary: $120,000 - $180,000 per annumAbout the RoleWe are seeking an experienced Cybersecurity Threat Detection Specialist to join our team at SAGL Consulting PTE. LTD. in Singapore. The successful candidate will be responsible for developing and maintaining threat detection use...

  • Cybersecurity Threat Detection Specialist

    1 week ago

    Singapore PERCEPT SOLUTIONS PTE. LTD. Full time

    Job Title:Cybersecurity Threat Detection SpecialistJob Overview:Percept Solutions PTE. LTD. is seeking a skilled Cybersecurity Threat Detection Specialist to join our team. As a key member of our security operations team, you will be responsible for overseeing the development and maintenance of threat detection use-cases in our SIEM system.Key...

  • Cybersecurity Engineer for Advanced Threat Detection

    3 weeks ago

    Singapore StarHub Full time

    Job OverviewStarHub is seeking a highly skilled Cybersecurity Engineer to join our team in the role of Senior Engineer, Security Content Automation. This exciting opportunity will involve designing, developing, and implementing SIEM/XDR use cases and SOAR playbooks to enhance security operation automation and meet customer requirements.Key...