{"id":823845,"url":"https://alion.io/job/ncs-eg-security-observability-engineer","title":"#EG Security Observability Engineer","company":{"id":8907,"name":"NCS","domain":"ncs.co","url":"https://alion.io/company/ncs-co","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"SmartRecruiters","truth_index":{"grade":"B","score":82,"open_postings":376,"ghost_share":0.298,"stale_share":0,"repost_share":0,"time_to_fill_p50_days":49,"computed_at":"2026-10-17T05:46:00Z"}},"role":"DevOps","role_family":"DevOps","seniority":"senior","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Singapore"],"countries":["SG"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":57000,"max_usd":104000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":60},"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Incident Management","optional":false},{"name":"Platform Engineering","optional":false},{"name":"SBOM","optional":false},{"name":"GitOps","optional":true},{"name":"Kubernetes","optional":true},{"name":"Linux","optional":true},{"name":"SIEM","optional":true}],"status":"live","first_seen_at":"2026-08-07T09:11:38Z","employer_posted_date":"2026-08-07","last_verified_at":"2026-10-18T03:49:54Z","board_verified":true,"closed_at":null,"days_open":71,"trust":{"level":"ok","repost_count":0,"flags":["company_stale"],"days_open":71},"description":"NCS is a leading technology services firm that operates across the Asia Pacific region in over 20 cities, providing consulting, digital services, technology solutions, and more. We believe in harnessing the power of technology to achieve extraordinary things, creating lasting value and impact for our communities, partners, and people. Our diverse workforce of 15,000 has delivered large-scale, mission-critical, and multi-platform projects for governments and enterprises in Singapore and the APAC region.\n We are looking for an engineer who will own the end-to-end evaluation, design, and implementation of security and observability solutions for a container-based private cloud platform. This role spans the full lifecycle - from architectural research and tool selection through production deployment and ongoing operations - across unified telemetry, security detection, vulnerability management, supply chain security, and automated incident response.\nYou will be the technical owner of the platform's observability and security monitoring stack, working across platform engineering, security operations, and SRE teams to deliver a unified telemetry-first architecture.\nWhat will you do?\nEvaluation & Research\nConduct structured evaluation of candidate tools against criteria including licence compliance, community governance, vendor independence, and technical fitness\nPerform proof-of-concept exercises to validate architectural decisions (e.g. ingestion throughput, storage efficiency, query latency, operational complexity)\nAssess and track governance posture of selected tools; maintain contingency paths for vendor-led dependencies\nEngage with upstream open-source communities and foundations to stay current on project maturity and roadmap changes\nDesign & Architecture\nDesign unified telemetry pipelines using open standards to serve both SRE observability and security operations from a single data layer\nArchitect security detection workflows using vendor-neutral detection languages to ensure portability of detection content across backends\nDesign vulnerability aggregation and management workflows spanning container scanning, software composition analysis, static analysis, infrastructure vulnerability scanning, and software bill of materials generation\nDesign supply chain security controls including image signing, provenance attestation, and registry policy enforcement\nDesign exposure path analysis using graph-based tooling to map relationships across compute orchestration, identity, source control, and vulnerability data\nDesign automated remediation and orchestration workflows integrated with alerting, ChatOps, and ticketing\nProduce and maintain architecture decision records documenting design rationale, trade-offs, and change history\nImplementation & Operations\nDeploy and operate the observability stack: telemetry collection, columnar storage, dashboarding, metrics scraping, alerting, and log routing\nDeploy and operate the security monitoring stack: endpoint/host-based detection, detection rule evaluation, vulnerability aggregation, and infrastructure scanning\nDeploy and operate CI pipeline security scanning: container image scanning, dependency scanning, SBOM generation, static analysis, infrastructure-as-code scanning, and secrets detection\nImplement image registry security with integrated vulnerability scanning and admission policy enforcement\nImplement identity, directory, secrets management, and certificate lifecycle infrastructure\nImplement collaboration and incident management tooling (ChatOps, ticketing)\nBuild and maintain detection rules, alerting rules, and automation playbooks\nOperate all components on a container orchestration platform with fleet-wide deployment tooling\nProcess & Governance\nDefine and document operational runbooks for each capability area\nEstablish and maintain vendor-independence contingency entries for all vendor-led tools\nConduct periodic licence and governance re-assessment of selected tools\nCollaborate with legal/compliance on copyleft licence reviews before deployment\nDefine SLOs for telemetry pipeline availability, ingestion latency, and detection coverage\nParticipate in security incident response using the tooling you build and operate\n Bachelor's degree in Computer Science, Cybersecurity, Information Systems, or equivalent practical experience\nRelevant certifications are a plus but not required (e.g. Kubernetes security, Linux administration, offensive security, or cloud security specialisations)\n5+ years in platform engineering, SRE, or security engineering roles\nStrong hands-on experience with at least 3 of the following:\nTelemetry collection frameworks and instrumentation standards\nColumnar or analytical databases for log/trace/event storage\nMetrics scraping and alerting ecosystems\nSIEM operations and detection engineering (vendor-neutral detection rule formats preferred)\nSearch-based log analytics platforms (to understand migration context)\nProduction experience deploying and operating on Kubernetes or equivalent container orchestration platforms\nExperience with container security scanning and software composition analysis tooling\nFamiliarity with supply chain security concepts: SBOM, image signing, provenance attestation, admission control\nExperience with at least one SOAR or automation/orchestration platform\nSolid understanding of log collection and routing architectures\nExperience writing detection rules or correlation logic for security monitoring\nAbility to evaluate open-source projects for governance health, licence risk, and production readiness\nStrong Linux systems fundamentals\nExperience with host-based intrusion detection or endpoint detection and response tooling\nExperience with graph databases and asset/infrastructure relationship mapping\nFamiliarity with vulnerability management and aggregation platforms\nExperience with identity providers, directory services, and secrets management\nContributions to open-source security or observability projects\nExperience operating in government or regulated environments with strict vendor-independence or sovereignty requirements\nFamiliarity with enterprise Linux and container platform ecosystems\nExperience with GitOps workflows for deploying infrastructure services\nStatic/dynamic application security testing tooling experience\n We are driven by our AEIOU beliefs-Adventure, Excellence, Integrity, Ownership, and Unity-and we seek individuals who embody these values in both their professional and personal lives. We are committed to our Impact: Valuing our clients, Growing our people, and Creating our future.\nTogether, we make the extraordinary happen.\nLearn more about us at ncs.co and visit our LinkedIn career site.\nScam Alert\nWe are aware of fraudulent job offers and impersonations of NCS recruiters. Phishing emails using convincing-looking but fake addresses are also commonly used to trick you into thinking that they come from official NCS sources.\nPlease note that all official communications from NCS Group will only be sent from verified corporate email addresses. Always check that the sender’s email address ends with the genuine NCS domain, @ncs.com.sg and beware of extra letters, symbols or misspellings. When in doubt, verify the sender’s identity by contacting us at .","description_format":"text","description_chars":7302,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[{"language":"English","level":"All levels","optional":false}]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Managed Security","IT Consulting & Digital Transformation","Systems Integrators","AI Consulting & Integration"],"lifecycle":[{"event":"open","at":"2026-09-12T13:41:30Z"}],"visa":[],"liveness":{"score":30,"band":"fade","label":"Fading","p_open":1,"p_active":0.69,"p_room":0.44,"age_days":70,"expected_fill_days":49,"reasons":["conf:0","velocity","win:tail","crowd:brand"],"computed_at":"2026-10-17T05:46:00Z"},"pay":null,"html_url":"https://alion.io/job/ncs-eg-security-observability-engineer","json_url":"https://alion.io/job/ncs-eg-security-observability-engineer.json","meta":{"generated_at":"2026-10-18T05:12:59Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":7879,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-19T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":8907},"rest":"https://alion.io/mcp/rest/get_company?id=8907"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fncs-eg-security-observability-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fncs-eg-security-observability-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fncs-eg-security-observability-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/ncs-eg-security-observability-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fncs-eg-security-observability-engineer"}]}