Cyber Security Operations Engineer

Grow With Us, Shape What’s Next

Who We Are

We are SimplyGo Pte. Ltd. (SPL), a wholly owned subsidiary of the Land Transport Authority, and a key player in the Singapore public transport ecosystem. We develop transit ticketing and travel card-related products and services that simplify journeys and create value for our commuters. We believe great ideas come from people who are curious, driven, and eager to learn. Join us if you are looking for an organisation that allows you to make a meaningful impact and provide the support you need to grow.

What You Will Do

At SPL, you are an integral part of our team - driving meaningful projects and witnessing the tangible difference your work makes. As a Senior Engineer, Security Operations, you will support and execute cybersecurity operations, security engineering, monitoring, and incident response across enterprise infrastructure, cloud platforms, applications, endpoints, and networks, with a strong focus on SIEM engineering, threat detection, and security monitoring. You will also strengthen the organization's cybersecurity posture by managing daily security operations, vulnerability management, cloud security governance, and security engineering initiatives.

Key Tasks You Will Be Involved In

IT Security Operations

• Support day-to-day cybersecurity operations, including continuous monitoring, threat detection, incident response, and security event management across enterprise environments.
• Monitor and validate the effectiveness of security technologies such as SIEM, SOAR, XDR, EDR, PAM, DDoS protection, and threat intelligence platforms.
• Collaborate with managed security service providers (MSSPs) and digital forensics partners to investigate and respond to security incidents.
• Perform alert triage, investigate indicators of compromise (IOCs), support incident reporting, and maintain comprehensive security asset coverage.

Security Engineering & Technology

• Support the implementation, enhancement, and lifecycle management of cybersecurity technologies, including SIEM, SOAR, XDR, PAM, SOC, and cloud security solutions.
• Fine-tune detection rules to improve alert quality, optimise security log management, troubleshoot Azure Arc and PAM solutions, and expand monitoring coverage across production environments.

Cybersecurity Projects & Continuous Improvement

• Contribute to cybersecurity initiatives that enhance the organization's security posture, strengthen governance, reduce cyber risk, and improve operational maturity.
• Support the implementation of security standards, regulatory compliance, and industry best practices while driving continuous improvements across cybersecurity operations.

What you’ll gain

At SimplyGo, our people are at the heart of everything we do.

We ASPIRE to create a supportive and inclusive workplace where you can thrive.

Here’s what you can look forward to:

Professional

• Continuous growth through training, mentorship, and development.
• Career pathways with room to advance and expand your skills.
• A culture of collaboration that celebrates innovation, respect, and teamwork.

Individual

• An attractive annual compensation package within the indicative range of $67,000 to $76,000, with compensation commensurate with experience, including an Additional Wage Supplement and Performance Bonus.
• Comprehensive benefits to support your lifestyle and wellbeing.
• Flexibility with hybrid work options and supportive arrangements.
• Wellbeing initiatives designed to keep you healthy, balanced, and engaged.

How to Apply

Send us your resume with a short note telling us what excites you most about this opportunity to [email protected].

This role might be for you if you have:

• Training in Computer Science, Information Security, Cybersecurity, or a related discipline.
• 3 to 5 years of hands-on experience in cybersecurity operations, Security Operations Centre (SOC), cloud security, or security engineering.
• Strong knowledge of SOC operations, security monitoring, SIEM engineering, threat detection, and incident response.
• Hands-on experience with Microsoft Sentinel, Microsoft Defender Suite, Microsoft 365 Defender, and cloud-native security monitoring solutions.
• Good understanding of cloud security architecture and infrastructure security across Microsoft Azure, AWS, and hybrid/multi-cloud environments.
• Experience with Identity and Access Management (IAM), Privileged Access Management (PAM), Role-Based Access Control (RBAC), and least-privilege access principles.
• Familiarity with Endpoint Detection and Response (EDR/XDR), threat hunting, threat intelligence, and security event analysis.
• Proven ability to investigate and respond to cybersecurity incidents, including malware, phishing, and advanced cyber threats.
• Passion for cybersecurity, technology innovation, continuous improvement, and delivering operational excellence.