{"id":3734762,"url":"https://alion.io/job/sicpa-cyber-threat-security-data-engineer","title":"Cyber Threat & Security Data Engineer","company":{"id":1810174,"name":"SICPA","domain":"sicpa.com","url":"https://alion.io/company/sicpa","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"SuccessFactors","truth_index":{"grade":"A","score":95,"open_postings":3,"ghost_share":0,"stale_share":0,"repost_share":0.333,"time_to_fill_p50_days":26,"computed_at":"2026-11-08T05:47:12Z"}},"role":"Security","role_family":"Security","seniority":"middle","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Cyberjaya, Malaysia"],"countries":["MY"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":null,"experience_years_min":3,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"ETL/ELT","optional":false},{"name":"PowerShell","optional":false},{"name":"Python","optional":false},{"name":"SIEM","optional":false}],"status":"live","first_seen_at":"2026-11-04T09:04:49Z","employer_posted_date":"2026-11-04","last_verified_at":"2026-11-07T09:10:55Z","board_verified":true,"closed_at":null,"days_open":3,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":3},"description":"CYBER THREAT AND SECURITY DATA ENGINEER\nROLE:\nThe SOC at SICPA is built of the most advanced and recent cyber technologies. Without levels distinction (Tier-1/2/3), the Cyber Threat & Security Data Engineer has an exclusive role and will perform both Operations duties and Engineering activities.\nOperational activities:\nMonitor the firm’s environment for abnormal behaviour and potential security breaches by triaging security alerts generated by cyber detection tools.\nLaunch response measures to security incidents within the SICPA network, infrastructure, identity management and applications.\nUtilize industry standard network and host forensic tools in order to fully understand the scope of an incident.\nPerform threat hunting by searching our existing infrastructure for signs of malware and malicious events not detected by our existing security controls.\nPerform on call duties on a scheduled basis.\nOperations is performed during business hours (no night operations).\nEngineering activities :\nDesign, implement and maintain security data pipelines, security data lake and data architecture used for threat detection, investigations, reporting and Agentic SOC capabilities.\nEnsure the quality, normalization, availability and reliability of security telemetry by continuously monitoring data health, ingestion performance and pipeline operations.\nOnboard new security and IT data sources into the SOC ecosystem, including log collection, parsing, enrichment and data validation.\nDefine, develop and maintain parsers, schemas and mappings required to maximize data usability across detection and investigation platforms.\nWork closely with security architects, platform engineers and threat analysts to ensure security data supports current and future detection use cases.\nDevelop a strong working relationship with key business and technical partners to ensure cross-organization, co-operation and business support.\nHelp to develop, implement, and maintain SOC policies, processes and procedures.\nPROFILE\nExperience in a similar environment (SOC, CERT, CSIRT) including Monitoring, Hunting and Incident response including Investigation and Forensic (minimum 3 years)\nBachelor degree in Cyber security or equivalent.\nExperience with data ingestion, log management, ETL/ELT concepts or security data pipelines.\nUnderstanding of data quality, data normalization and schema management principles.\nKnowledge of APIs, JSON, data parsing and automation scripting (Python, PowerShell or similar).\nInterest in AI-enabled and Agentic SOC operating models.\nPractical experience with security technologies such as firewalls, IDS/IPS, SIEM, anti-malware, web filtering, vulnerability scanning and endpoint detection and response tools.\nHands-on experience in investigating and responding to common types of cyber attacks.\nStrong understanding of enterprise IT, including networking infrastructure, operating systems, cloud and SaaS services, systems administration, data centers and software applications.\nGood communications skills to effectively summarize and present findings.\nVery good knowledge of English both written and spoken, other languages are an asset. Ability to engender positive and reliable work attitude when confronting with high pressure business situations.\nJOIN US!\nWe offer an exciting and challenging role, with great potential for personal development and a truly global impact. Help us contribute to a more secure world and enable trust in the digital society!","description_format":"text","description_chars":3482,"description_truncated":false,"requirements":{"experience_years_min":3,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":true},"security_clearance":false,"languages":[{"language":"English","level":"All levels","optional":false}]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Packaging & Labeling","Brand Protection & Anti-Counterfeiting"],"lifecycle":[{"event":"open","at":"2026-11-04T09:04:49Z"}],"visa":[],"liveness":{"score":90,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.903,"p_room":1,"age_days":3,"expected_fill_days":26,"reasons":["conf:20","velocity","win:early"],"computed_at":"2026-11-08T05:47:12Z"},"pay":null,"html_url":"https://alion.io/job/sicpa-cyber-threat-security-data-engineer","json_url":"https://alion.io/job/sicpa-cyber-threat-security-data-engineer.json","meta":{"generated_at":"2026-11-08T08:42:06Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":18889,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-09T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":1810174},"rest":"https://alion.io/mcp/rest/get_company?id=1810174"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fsicpa-cyber-threat-security-data-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fsicpa-cyber-threat-security-data-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fsicpa-cyber-threat-security-data-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/sicpa-cyber-threat-security-data-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fsicpa-cyber-threat-security-data-engineer"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3734762}},{"tool":"search_jobs","arguments":{"company":"sicpa.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3734762},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}