{"id":517748,"url":"https://alion.io/job/assurity-trusted-solutions-cybersecurity-engineer-detection-engineering","title":"Cybersecurity Engineer (Detection Engineering)","company":{"id":232832,"name":"Assurity Trusted Solutions","domain":"assurity.sg","url":"https://alion.io/company/assurity","size_band":"5000+","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workable","truth_index":{"grade":"A","score":92,"open_postings":35,"ghost_share":0,"stale_share":0.114,"repost_share":0,"time_to_fill_p50_days":94,"computed_at":"2026-10-25T05:49:26Z"}},"role":"Security","role_family":"Security","seniority":null,"employment_type":"contractor","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Singapore"],"countries":["SG"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":null,"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"PowerShell","optional":false},{"name":"Python","optional":false},{"name":"SIEM","optional":false},{"name":"Splunk","optional":false},{"name":"YARA","optional":false},{"name":"YARA","optional":false}],"status":"live","first_seen_at":"2026-09-02T00:00:00Z","employer_posted_date":"2026-09-02","last_verified_at":"2026-10-25T13:27:21Z","board_verified":true,"closed_at":null,"days_open":53,"trust":{"level":"ok","repost_count":0,"flags":[],"days_open":53},"description":"Assurity Trusted Solutions (ATS) is a wholly owned subsidiary of the Government Technology Agency (GovTech). As a Trusted Partner over the last decade, ATS offers a comprehensive suite of products and services ranging from infrastructure and operational services, authentication services, governance and assurance services as well as managed processes. In a dynamic digital and cyber landscape, where trust & collaboration are key, ATS continues to drive mutually beneficial business outcomes through collaboration with GovTech, government agencies and commercial partners to mitigate cyber risks and bolster security postures.\nWe are looking for a Cybersecurity Engineer with a background in detection engineering to join us!\nResponsibilities:\nDevelop, implement, and document effective security detection rules - using languages/frameworks such as Sigma, KQL, SPL, EQL, or YARA as applicable to the deployed SIEM platforms - and playbooks to identify potential threats and malicious activity targeting government systems in on-premises and cloud environments.\nConduct comprehensive and in-depth analysis of security logs and alerts from security monitoring (e.g. SIEM) and detection systems (e.g. EDR) deployed within the government environment, to differentiate true treats from benign activity and reduce false positives across network, endpoint, and cloud security domains\nContinuously improve detection capabilities through in-depth research on threats targeting government networks, endpoints, and cloud environments, to write and tune detection rules (e.g. Sigma rules, KQL/SPL queries, YARA signatures) for enhanced threat detection while reducing benign alerts, leveraging automation for enhanced efficiency.\nCollaborate with security analysts and incident responders on government specific incident response protocols and investigation activities, with a focus on operationalising detection rules for accurate alert escalation.\nCollaborate with security engineers to drive integration of detection systems used within the government environment, by providing detection requirements and defining problem areas to streamline workflows and optimise tool usage.\nMaintain a comprehensive understanding of the evolving threat landscape, including the latest tactics, techniques, and procedures (TTPs) used to target government networks, as well as the latest security trends and best practices in detection developme\nRequirements\nDegree in Cybersecurity, Information Security, Computer Science or a related field.\nRelevant cybersecurity certifications from OffSec, SANS, GIAC or related institution in cloud security, detection engineering, incident response, malware analysis, or security penetration testing domain. A minimum of 3 years’ experience in security operations, incident response or related cybersecurity fields, demonstrating a proven track record in threat detection and analysis, preferably within an enterprise or government environment.\nUnderstand security concepts and cybersecurity frameworks such as MITRE ATT&ACK, including commonly used attacker TTPs and their detection.\nDemonstrate strong technical foundation, preferably with hands-on experience in security technologies (e.g. SIEM, EDR, SOAR), scripting languages (e.g. Python, PowerShell) and automation tools to facilitate the development and tuning of detection rules. Working knowledge of one or more detection rule languages such as Sigma, YARA-L, Splunk SPL, Microsoft KQL, or Elastic EQL, with the ability to translate threat intelligence and attacker TTPs into structured, testable detection logic.\nExperience with version control process and tools and detections as code workflow (e.g. peer review, testing of detection logic against sample log data)\nExcellent analytical and problem-solving skills, ability to prioritise tasks, as well as willing to learn new technology and approaches.\nStrong communication and collaboration skills to work effectively on intra team and inter-team tasks.\nJoin us and discover a meaningful and exciting career with Assurity Trusted Solutions!\nThe remuneration package will commensurate with your qualifications and experience. Interested applicants, please click \"Apply Now\".\nWe thank you for your interest and please note that only shortlisted candidates will be notified.\nBy submitting your application, you agree that your personal data may be collected, used and disclosed by Assurity Trusted Solutions Pte. Ltd. (ATS), GovTech and their service providers and agents in accordance with ATS’s privacy statement which can be found at: or such other successor site.\nBenefits\n A wholly-owned subsidiary of GovTech.\n We promote a learning culture and encourage you to grow and learn.","description_format":"text","description_chars":4707,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Cybersecurity","Information Security","Identity Management","Vulnerability Management"],"lifecycle":[{"event":"open","at":"2026-09-07T21:40:02Z"}],"visa":[],"liveness":{"score":74,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.822,"p_room":0.9,"age_days":53,"expected_fill_days":94,"reasons":["conf:0","velocity","win:mid"],"computed_at":"2026-10-25T05:49:26Z"},"pay":null,"html_url":"https://alion.io/job/assurity-trusted-solutions-cybersecurity-engineer-detection-engineering","json_url":"https://alion.io/job/assurity-trusted-solutions-cybersecurity-engineer-detection-engineering.json","meta":{"generated_at":"2026-10-25T14:32:00Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":20971,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-26T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":232832},"rest":"https://alion.io/mcp/rest/get_company?id=232832"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fassurity-trusted-solutions-cybersecurity-engineer-detection-engineering"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fassurity-trusted-solutions-cybersecurity-engineer-detection-engineering"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fassurity-trusted-solutions-cybersecurity-engineer-detection-engineering"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/assurity-trusted-solutions-cybersecurity-engineer-detection-engineering\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fassurity-trusted-solutions-cybersecurity-engineer-detection-engineering"}]}