{"id":3318755,"url":"https://alion.io/job/simba-telecom-senior-security-data-detection-engineer","title":"Senior Security Data & Detection Engineer","company":{"id":49915,"name":"Simba Telecom","domain":"simba.sg","url":"https://alion.io/company/simba-telecom","size_band":null,"is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":null,"truth_index":null},"role":"Security","role_family":"Security","seniority":"senior","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"explicit","locations":["Singapore"],"countries":["SG"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":10000,"max":14000,"currency":"SGD","period":"month","gross":true,"usd_annual":131160},"salary_estimate":null,"experience_years_min":8,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Amazon ECS","optional":false},{"name":"Elastic SIEM","optional":false},{"name":"ElasticSearch","optional":false},{"name":"Kibana","optional":false},{"name":"MITRE ATT&CK","optional":false},{"name":"Python","optional":false},{"name":"SIEM","optional":false},{"name":"SQL","optional":false}],"status":"live","first_seen_at":"2026-10-27T00:00:00Z","employer_posted_date":null,"last_verified_at":"2026-10-27T00:00:00Z","board_verified":false,"closed_at":null,"days_open":8,"trust":{"level":"not_scored","repost_count":null,"flags":[],"days_open":8},"description":"Department: CISO Office\nLocation: Singapore\nExperience: 8+ years preferred\nRole Overview\nWe are seeking a hands-on Security Data & Detection Engineer to build and enhance our next-generation, AI-driven Security Operations Centre (Agentic SOC) supporting telecommunications Critical Information Infrastructure (CII).\nThe role focuses on security data engineering, real-time threat detection, security analytics and proactive threat hunting to defend against sophisticated Advanced Persistent Threats (APTs).\nKey Responsibilities\nSecurity Data Engineering: Design and maintain telemetry ingestion pipelines using Axoflow/Cribl or equivalent technologies, integrating security logs across network, endpoint, identity, cloud and telecommunications environments.\n\nData Enrichment and Analytics: Implement parsing, normalisation, enrichment and correlation of security telemetry using ECS/OCSF schemas and relevant asset, identity and threat intelligence context.\n\nSecurity Data Platform: Develop and optimise Elasticsearch, Kibana and Elastic Security for scalable security analytics, detection and historical threat hunting.\n\nDetection Engineering: Develop in-stream and SIEM detection rules, behavioural analytics and correlation logic targeting APT techniques, including lateral movement, credential abuse and living-off-the-land activity.\n\nThreat Hunting: Develop and execute threat-hunting queries, investigate suspicious patterns and translate emerging threat intelligence into actionable detections.\n\nDetection Validation: Work with MDR specialists to validate detections through adversary emulation, purple teaming and continuous tuning.\n\nAgentic SOC Integration: Enable secure access to security telemetry and detection outputs for AI investigation agents.\n\nRequired Skills & Experience\nStrong experience in SIEM engineering, security analytics, detection engineering or security data engineering.\n\nHands-on experience with Elasticsearch, Kibana, Elastic Security or comparable SIEM platforms.\n\nExperience with security log ingestion, parsing, enrichment and data pipelines.\n\nProficiency in Python and security query languages such as ES|QL, KQL, SPL or SQL.\n\nStrong understanding of cybersecurity threats, MITRE ATT&CK, threat hunting and incident investigation.\n\nExperience designing and troubleshooting production security monitoring solutions.\n\nIdeal Candidate\nAn experienced SIEM or Detection Engineer with strong security data engineering capabilities who can translate complex threat scenarios into reliable, contextualised detections and security analytics.\nSkills\nSecurity Operations, Detection and Monitoring Application, Data Insight, Endpoint Management, Parsing, Data Engineering, Credentialing, ElasticSearch, Telecom Infrastructures, Kibana, APT, Security Consulting, Enterprise Security Solutions, Data security platforms","description_format":"text","description_chars":2841,"description_truncated":false,"requirements":{"experience_years_min":8,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[{"name":"Singapore","iso":"SG","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Internet Service Providers","Mobile Networks"],"lifecycle":[{"event":"open","at":"2026-10-27T06:28:25Z"}],"visa":[],"liveness":{"score":89,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.888,"p_room":1,"age_days":8,"expected_fill_days":29,"reasons":["seen:8","velocity","win:early"],"computed_at":"2026-11-04T06:34:25Z"},"pay":{"stated_usd_annual":131160,"is_top_pay":false},"html_url":"https://alion.io/job/simba-telecom-senior-security-data-detection-engineer","json_url":"https://alion.io/job/simba-telecom-senior-security-data-detection-engineer.json","meta":{"generated_at":"2026-11-04T13:15:52Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":20060,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-05T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":49915},"rest":"https://alion.io/mcp/rest/get_company?id=49915"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fsimba-telecom-senior-security-data-detection-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fsimba-telecom-senior-security-data-detection-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fsimba-telecom-senior-security-data-detection-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/simba-telecom-senior-security-data-detection-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fsimba-telecom-senior-security-data-detection-engineer"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3318755}},{"tool":"search_jobs","arguments":{"company":"simba.sg","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3318755},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}