Lead Threat Detection Engineer

4 days ago


Singapore PayPal Full time

**At PayPal (NASDAQ**: PYPL), we believe that every person has the right to participate fully in the global economy. Our mission is to democratize financial services to ensure that everyone, regardless of background or economic standing, has access to affordable, convenient, and secure products and services to take control of their financial lives.

**Job Description Summary**: The Lead Cybersecurity Engineer will be a part of the threat engineering team, a global technical team that provides support on advanced solutions for security controls, tooling, detections, automation, monitoring, purple teaming, research and alerting in alignment with the MITRE ATT&CK Framework.

We are looking for a Lead Cybersecurity Engineer to join our threat engineering team. In this IC (Individual Contributor) role, you will support and develop on-prem and cloud (Azure, AWS, GCP) defensive tools and procedures to optimize threat mitigation and increase PayPal's security posture. The primary day-today responsibilities include designing solutions to improve overall security posture for incident response operations, cybersecurity analysts and threat hunters across the global business. Key Responsibilities: Leading the engineering, implementation, and maintenance of security tools, solutions, and processes to ensure an appropriate level of security posture. Lead and manage the security policies of top-of-the-line security tools (EDR, UBA, Cloud, and SIEM) Develop detection rules across various platforms and Business Units to improve our overall detection capabilities Create automated processes and workflows to improve PayPal's security posture and SLA (Service Level Agreements) adherence Perform end-to-end threat hunting cycle, including Purple Team exercises Provide situational awareness on the current threat landscape and the techniques, tactics and procedures associated with specific threats Collaborate with colleagues across the globe to impact and drive results.

**Qualifications**: 7+ years of experience in Cybersecurity, ideally with previous a Security Operation Center (SOC) Analyst. Bachelor's Degree or equivalent experience in information security technology or equivalent work experience and/or Security certifications. Experience with Splunk Enterprise Security; building detections, and advanced querying, dashboarding. Experience with Security Orchestration, Automation and Response Tools (SOAR) Knowledge of or demonstrated experience with defense in depth, trust levels, privileges, and permissions. Experience with Kusto Query Language (KQL) or other Database query languages, an advantage Strong technical experience and familiarity with various techniques of cyber-attacks, MITRE ATT&CK framework, Purple Team concepts, incident response, and threat hunting modelling Working experience within a Security Operations Center environment, improving SOC processes and workflows related to security operations Java scripting or python programming, an advantage, but not required Deep understanding of tools and processes used in security incident detection and handling Strong organizational and multi-tasking and time management skills Ability to work in a dynamic and multicultural environment, with a collaborative and positive/professional persona Highly motivated, results focused, innovative, curious, and a continuous learner

**Our Benefits**:
At PayPal, we’re committed to building an equitable and inclusive global economy. And we can’t do this without our most important asset—you. That’s why we offer benefits to help you thrive in every stage of life. We champion your financial, physical, and mental health by offering valuable benefits and resources to help you care for the whole you.

**Who We Are**:
Click Here to learn more about our culture and community.

As part of PayPal’s commitment to employees’ health and safety, we have established in-office Covid-19 protocols and requirements, based on expert guidance. Depending on location, this might include a Covid-19 vaccination requirement for any employee whose role requires them to work onsite. Employees may request reasonable accommodation based on a medical condition or religious belief that prevents them from being vaccinated.


  • Threat Detection

    2 days ago


    Singapore TOSS-EX PR PTE. LTD. Full time

    Team description and details ofroleThe Threat Detection &Response Manager works within the Security Operations Center(dbSOC), which is set up within a Follow-The-Sun model. He/She isresponsible for the monitoring, detection and analysis ofinformation security events andincidents.Additionally, he/she acts as aspecialist for information security incident...

  • Solutions Engineer

    6 days ago


    Singapore People Profilers Full time

    Job Description: **Location: Hybrid Work Arrangement / Office at Jurong East** **Industry: Automotive - MNC** **Salary Range: Up to $10,000** **Description**: - We are seeking a highly skilled Threat Detection Engineer to join our team. In this role, you will be responsible for overseeing the engineering, development, and maintenance of threat...


  • Singapore Hays Full time

    **Your new company** My client is a Global Technology/Electronics company with presence across the world. With their growing stature and expanding business, they are looking for a a Senior Threat Detection Engineer to join their growing team. **Your new role** - Investigate and review threats/intrusions on initial infection vector determination,...


  • Singapore VANTAGE POINT SECURITY PTE. LTD. Full time

    Job Brief:VANTAGE POINT SECURITY PTE. LTD. is seeking a Threat Detection and Response Professional to join our team of cybersecurity experts. As a key member of our team, you will be responsible for delivering threat detection and response services that meet or exceed client expectations.The successful candidate will have achieved CREST CRT certification and...


  • Singapore TikTok Full time

    Responsibilities TikTok is the leading destination for short-form mobile video. At TikTok, our mission is to inspire creativity and bring joy. TikTok's global headquarters are in Los Angeles and Singapore, and its offices include New York, London, Dublin, Paris, Berlin, Dubai, Jakarta, Seoul, and Tokyo. Why Join Us Creation is the core of TikTok's purpose....


  • Singapore SAGL CONSULTING PTE. LTD. Full time

    **Overview: **Key Responsibilities**: - Design, test, and refine new detection use cases within the SIEM platform. - Enhance and optimize existing detection use cases using Machine Learning and User & Entity Behavior Analytics (UEBA). - Map detection use cases to the MITRE ATT&CK framework to evaluate and ensure comprehensive monitoring coverage. - Maintain...


  • Singapore JL CABLE DETECTION PTE. LTD. Full time

    Job OverviewJL CABLE DETECTION PTE. LTD. is a leading provider of underground utility detection services.


  • Singapore TIKTOK PTE. LTD. Full time

    **About the Role:**TikTok PTE. LTD. is a leading global destination for short-form mobile video, and we are seeking an exceptional Global E-Commerce Security Threat Detection Specialist to join our team.In this role, you will be responsible for ensuring a safe and trustworthy marketplace for buyers, sellers, and creators through extensive experience in...


  • Singapore MENRVA PTE. LTD. Full time

    Job Description:MENRVA PTE. LTD. is seeking a highly skilled Cyber Threat Intelligence Lead to join our team. As a key member of our organization, you will play a pivotal role in proactively discovering hidden threats and minimizing the detection timeframe for cyber-attacks.The ideal candidate will possess a deep understanding of network analysis, digital...


  • Singapore STARWOOD ASIA PACIFIC HOTELS & RESORTS PTE. LTD. Full time

    Roles & ResponsibilitiesJOB SUMMARYThis is a detection engineering role that leverages knowledge of monitoring, analyzing, detecting, and responding to cyber events and incidents to develop and implement effective monitoring and alerting for information systems and networks. This role is responsible for developing and tuning Security Information and Event...


  • Singapore JJ Consulting Services Full time

    Our Client is an established company in Singapore, who is seeking to recruit a **Lead** **Threat Intelligence Analyst.** **Lead Threat Intelligence Analyst** **Responsibilities** - Monitor and analyse threat intelligence from open and commercial sources for attack campaigns, new vulnerabilities, IOCs and threat actor groups and their TTPs - Hunt actively...


  • Singapore Charterhouse Pte Ltd Full time

    Cyber Threat Intelligence (CTI) Engineer/Threat Hunter (3+ Years of Experience)We are seeking a skilled and experienced Cyber Threat Intelligence (CTI) Engineer / Threat Hunter to enhance our cybersecurity team. In this role, you will be responsible for collecting, analyzing, and interpreting cyber threat intelligence to inform proactive threat hunting and...


  • Singapore Good Job Creations Pte Ltd Full time

    Overall direction and control of Singapore Content operations and Global Threat Intelligence - Hire, develop, train and mentor our Singapore Content team and our Threat Intelligence Analysts - Sets standards and KPIs that align with corporate goals for service delivery and report on agreed metrics - Drive continuous improvement in productivity and output of...

  • SOC Threat Analyst

    9 hours ago


    Singapore LINKTRIX SERVICES PTE. LTD. Full time

    Roles & ResponsibilitiesCyber Security Engineer We are seeking a SOC, Threat Hunting & (IR) Expert with deep expertise in playbook development, validation, and automation to contribute to the development of a next-generation cybersecurity product. This role requires a hands-on security professional who can bridge SOC operations, threat intelligence, and...

  • Cyber Threat Analyst

    16 hours ago


    Singapore ALPHAEUS PTE. LTD. Full time

    What we seek to accomplish together: - Proactively 'hunt' for potential malicious activity and incidents across the environment using advanced threat network and host-based tools adopting Mitre Attack Framework. - Perform hunting for malicious activity across the network, endpoint, and Critical Assets. - Create hunting hypothesis and perform IOCs & TTPs...

  • Threat Hunter

    5 days ago


    Singapore F-secure Full time

    I'm interested WithSecure is world renowned for its End Point Protection solutions - providing preventative and proactive protection to tens of millions of computer and smart devices globally. Over the past few years, the company has successfully entered new markets and has increased its portfolio of solutions to include Cyber Consulting and Managed...


  • Singapore Charterhouse Asia Full time

    At Charterhouse Asia, we are seeking a highly skilled and experienced Cyber Threat Intelligence (CTI) Engineer/Threat Hunter to enhance our cybersecurity team. This role is instrumental in detecting, mitigating, and responding to cyber threats using advanced tools and techniques.Key Responsibilities:Develop Threat Intelligence Strategies:Enhance Threat...


  • Singapore ETHOS SEARCH ASSOCIATES PTE. LTD. Full time

    About UsEthos Search Associates Pte. Ltd. is a forward-thinking cybersecurity firm that prioritizes innovation and expertise.Job Title: Cyber Threat Hunter LeadJoin us in our pursuit of excellence as we seek a skilled Cyber Threat Hunter Lead to drive our threat research efforts forward.As a key member of our team, you will be responsible for leading the...


  • Central Singapore Booz Allen Full time

    Cyber Threat Hunter, Lead **The Opportunity**: Cyber threats are evolving, and perimeter security and automated protection aren’t enough—it’s time to go threat hunting. We need your help in detecting advanced cyber threats to Federal Civilian Executive Branch Agencies, the DoD, Intelligence Communities, and Fortune 500 Companies. Instead of letting the...


  • Central Singapore Booz Allen Hamilton Full time

    Location: - Singapore,SG - Remote Work: - Yes - Job Number: - R0190203 - Cyber Threat Hunter, Lead - ** The Opportunity**: Cyber threats are evolving, and perimeter security and automated protection aren’t enough—it’s time to go threat hunting. We need your help in detecting advanced cyber threats to Federal Civilian Executive Branch Agencies, the...