Senior Engineer, Security & Observability Platform - A26270
On-siteSingapore, Singapore
Job Summary
Own the end-to-end evaluation, design, and implementation of security and observability solutions for a container-based private cloud platform, spanning architectural research through production deployment and ongoing operations. Conduct structured tool evaluations against criteria including license compliance and vendor independence, then perform proof-of-concept exercises to validate architectural decisions. Design unified telemetry pipelines and security detection workflows using open standards, while architecting vulnerability aggregation, supply chain controls, and automated remediation orchestration. Deploy and operate the observability and security monitoring stacks on Kubernetes, maintaining detection rules, alerting playbooks, and operational runbooks. Define SLOs for telemetry availability and detection coverage, participate in incident response, and collaborate with legal teams on license governance. This 12-month fixed-term role supports Singapore Government Agency projects within a consultancy focused on mobile, web, and cloud technologies.
Required Qualifications
- 5+ years in platform engineering, SRE, or security engineering roles
- Strong hands-on experience with at least 3 of the following: Telemetry collection frameworks and instrumentation standards, Columnar or analytical databases for log/trace/event storage, Metrics scraping and alerting ecosystems, SIEM operations and detection engineering (vendor-neutral detection rule formats preferred), Search-based log analytics platforms (to understand migration context), Production experience deploying and operating on Kubernetes or equivalent container orchestration platfo...
- Bachelor's degree in Computer Science, Cybersecurity, Information Systems, or equivalent practical experience
Desired Qualifications
- Relevant certifications are a plus but not required (e.g. Kubernetes security, Linux administration, offensive security, or cloud security specializations)
- Experience with host-based intrusion detection or endpoint detection and response tooling
- Experience with graph databases and asset/infrastructure relationship mapping
- Familiarity with vulnerability management and aggregation platforms
- Experience with identity providers, directory services, and secrets management
- Contributions to open-source security or observability projects
- Experience operating in government or regulated environments with strict vendor-independence or sovereignty requirements
- Familiarity with enterprise Linux and container platform ecosystems
- Experience with GitOps workflows for deploying infrastructure services
- Static/dynamic application security testing tooling experience
Hiring someone like this?
Get your role in front of qualified candidates on Sorce.