{"id":1242374,"url":"https://alion.io/job/ytl-powerseraya-pte-limited-security-operations-engineer","title":"Security Operations Engineer","company":{"id":246609,"name":"YTL PowerSeraya","domain":"ytlpowerseraya.com.sg","url":"https://alion.io/company/ytlpowerseraya","size_band":null,"is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":null,"truth_index":null},"role":"Security","role_family":"Security","seniority":"middle","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Singapore"],"countries":["SG"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":5800,"max":6700,"currency":"SGD","period":"month","gross":true,"usd_annual":62952},"salary_estimate":null,"experience_years_min":4,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Azure","optional":false},{"name":"CIS Benchmarks","optional":false},{"name":"Linux","optional":false},{"name":"SIEM","optional":false},{"name":"Windows","optional":false}],"status":"live","first_seen_at":"2026-09-25T00:00:00Z","employer_posted_date":null,"last_verified_at":"2026-09-25T00:00:00Z","board_verified":false,"closed_at":null,"days_open":30,"trust":{"level":"not_scored","repost_count":null,"flags":[],"days_open":30},"description":"COMPANY DESCRIPTION\n\n YTL PowerSeraya Pte. Limited, a wholly owned subsidiary of YTL Power International Berhad, is in the business of producing, wholesaling, trading and retailing of energy; with a primary focus on electricity. As an established player in Singapore's energy sector, it supplies the country's energy needs through its multi-utilities platform. With a licensed generation capacity of 3,100 MW*, it is one of Singapore's largest electricity generators.\n\nThe YTL PowerSeraya Group has three subsidiaries: the retail arm under the Geneco brand provides electricity price plans and energy solutions to homes and businesses, PetroSeraya is the fuel management arm of the Group, and Taser Power which operates Taser Power Plant.\n\nBesides being a Plaque of Commendation (GOLD) awardee at the National Trade Union Congress's May Day Awards 2023, YTL PowerSeraya has adopted four Tripartite Standards under the Tripartite Alliance for Fair and Progressive Employment Practices, and has committed to be a fair and progressive employer. To find out more about the organisation, please visit ytlpowerseraya.com.\n\n*As at 4 February 2026, our registered generating capacity with EMA is 2,487 MW.\n\n RESPONSIBILITIES\n\n We are seeking a motivated and detail-oriented Security Operations Engineer to join our Infrastructure Operations & Cyber Security team. This role is responsible for supporting day-to-day security operations across Azure and on-premises environments, with a focus on security event investigation, endpoint protection, vulnerability management, security monitoring, and cyber awareness initiatives.\n\nThe successful candidate will work closely with internal technology teams, managed security service providers, vendors, and business stakeholders to investigate security events, improve cyber resilience, maintain operational security controls, and contribute to the continuous enhancement of the organisation's security posture.\n\nKEY RESPONSIBILITIES\n\nSecurity Engineering & Hardening\n\nSupport the implementation, maintenance, and continuous improvement of security controls across infrastructure and cloud environments.\n\nAssist with onboarding and validating security log sources into approved SIEM platforms.\n\nSupport detection tuning, security configuration reviews, and monitoring improvements.\n\nEvaluate and implement security technologies that strengthen the organisation's cyber defence capabilities.\n\nSupport the deployment and maintenance of security hardening standards across Windows, Linux, Microsoft 365, and Azure environments.\n\nEnsure controls align with CIS Benchmarks and industry-recognised security best practices.\n\nVulnerability Management & Threat Advisory\n\nCoordinate vulnerability assessment activities for critical infrastructure and servers.\n\nValidate assessment findings and engage system owners to ensure timely remediation.\n\nMonitor cybersecurity advisories, threat intelligence notifications, and indicators of compromise (IOCs).\n\nPerform IOC validation activities and coordinate blacklisting, containment, investigation, and remediation actions where necessary.\n\nTrack, monitor, and report remediation progress until closure.\n\nSecurity Operations & Incident Response\n\nInvestigate and follow up on security alerts, incidents, and suspicious activities escalated by the external SOC team across endpoints, servers, email, and cloud environments.\n\nAssess security events, determine potential impact, gather relevant technical and business context, and coordinate containment, recovery, remediation, and closure activities.\n\nAct as the internal coordination point between infrastructure teams, vendors, system owners, and external security providers during incident investigations.\n\nSupport security monitoring activities through SIEM dashboards, workbooks, queries, scheduled reporting, evidence collection, and case tracking.\n\nUtilize approved AI-assisted tools to improve alert triage, investigation efficiency, log analysis, and case documentation in accordance with security and data-handling requirements.\n\nIdentify and promote practical AI-assisted use cases that improve operational consistency and security investigation effectiveness.\n\nEndpoint Security & Platform Protection\n\nAdminister and support endpoint protection and Endpoint Detection & Response (EDR) platforms.\n\nMonitor agent health, policy compliance, signature updates, asset coverage, and endpoint security status.\n\nPerform endpoint troubleshooting, agent deployment, reinstallation, and remediation activities.\n\nSupport housekeeping activities to maintain security tool effectiveness and infrastructure visibility.\n\nSecurity Awareness & User Engagement\n\nCoordinate organisation-wide security awareness initiatives and phishing simulation campaigns.\n\nDeliver targeted follow-up activities, awareness communications, and user education programs.\n\nMonitor phishing resilience results and prepare reporting on participation rates, trends, and improvement opportunities.\n\nSupport broader cyber awareness initiatives including newsletters, learning modules, roadshows, and periodic security communications.\n\nGovernance, Documentation & Reporting\n\nMaintain and update security policies, procedures, standards, technical documents, operational playbooks, and tracking records.\n\nSupport review and maintenance of incident response procedures, investigation workflows, hardening standards, endpoint security procedures, and operational documentation.\n\nPrepare monthly and ad-hoc cyber security reports, dashboards, inventories, metrics, and compliance-related documentation.\n\nMaintain accurate operational records to support management reporting, regulatory compliance, audits, and continuous improvement activities.\n\nSupport multiple operational and project-based initiatives while meeting established timelines and service expectations.\n\nQUALIFICATIONS\n\nDiploma or Degree in Information Technology, Cybersecurity, Computer Science, or a related discipline.\n\n4-6 years of experience in cybersecurity operations, infrastructure security, or a related technical security role.\n\nWorking knowledge of endpoint protection, EDR technologies, SIEM platforms, and security incident investigation processes.\n\nProficient in vulnerability management, remediation tracking, IOC validation, and security monitoring concepts.\n\nProficient knowledge for Windows, Linux, Microsoft 365, Azure, and general cloud security principles.\n\nUnderstanding of security awareness programs, phishing simulations, malware investigation, and security documentation practices.\n\nExposure to open-source security monitoring or cyber defence tools will be advantageous.\n\nProfessional certifications such as ISC2 CC, CompTIA Security+, Microsoft SC-200, CEH, CHFI, or similar certifications will be advantageous.\n\nAI & DIGITAL SKILLS WE VALUE\n\nWe do not expect candidates to be AI specialists. We are looking for security professionals who are curious about responsible AI usage and able to leverage modern technologies to improve cyber defence operations.\n\nFamiliarity with AI-assisted security operations, threat detection, log analysis, and incident investigation use cases.\n\nAbility to evaluate and validate AI-assisted outputs while maintaining human oversight and professional judgement.\n\nUnderstanding of responsible AI principles including privacy, security, transparency, and appropriate handling of sensitive information.\n\nInterest in emerging cybersecurity technologies, attack techniques, threat intelligence, and cyber defence innovation.\n\nContinuous learning mindset with a willingness to explore new tools, methodologies, and automation opportunities.\n\n OTHER INFORMATION\n WHAT WE OFFER\n\nOpportunity to work in a critical cyber security function supporting enterprise infrastructure and operational resilience.\n\nHands-on exposure to cloud security, security operations, threat investigation, vulnerability management, and cyber defence technologies.\n\nAccess to continuous learning and professional development opportunities in cybersecurity, cloud technologies, AI, and emerging security domains.\n\nOpportunity to work alongside experienced cybersecurity and infrastructure professionals in a collaborative environment.\n\nCompetitive remuneration package commensurate with experience.\n\nStaggered working hours and a culture that values innovation, security, teamwork, and continuous improvement.\n\n Please note that your application will be sent to and reviewed by the direct employer - YTL PowerSeraya Pte. Limited\nSkills\nProcedure Development, Incident Response, Risk Assessment, IDS, Assurance, Information Technology, NIST, DoD, Endpoint Security, Network Security, Linux, Security Monitoring, Firewall Management","description_format":"text","description_chars":8702,"description_truncated":false,"requirements":{"experience_years_min":4,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Continuous learning","Professional development"],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Information Security"],"lifecycle":[{"event":"open","at":"2026-09-25T16:15:06Z"}],"visa":[],"liveness":{"score":23,"band":"cold","label":"Long shot","p_open":0.6,"p_active":0.712,"p_room":0.55,"age_days":30,"expected_fill_days":30,"reasons":["seen:30","win:tail"],"computed_at":"2026-10-25T05:49:26Z"},"pay":{"stated_usd_annual":62952,"is_top_pay":false},"html_url":"https://alion.io/job/ytl-powerseraya-pte-limited-security-operations-engineer","json_url":"https://alion.io/job/ytl-powerseraya-pte-limited-security-operations-engineer.json","meta":{"generated_at":"2026-10-25T08:23:43Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":11948,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-26T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":246609},"rest":"https://alion.io/mcp/rest/get_company?id=246609"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fytl-powerseraya-pte-limited-security-operations-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fytl-powerseraya-pte-limited-security-operations-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fytl-powerseraya-pte-limited-security-operations-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/ytl-powerseraya-pte-limited-security-operations-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fytl-powerseraya-pte-limited-security-operations-engineer"}]}