Security Operations and Detection Engineer SecOps AI Cloud
Posted Updated
Description
You will monitor, triage, contain, escalate, and document security incidents across GPU infrastructure, cloud platforms, and public services. You will tune detection rules, automate alert triage, meet incident-response SLAs, and coordinate daily handoffs with the Singapore security team.
Responsibilities
- Triage, contain, escalate, and document P1 and P2 security incidents
- Meet incident acknowledgment and response SLAs
- Tune and build alert rules in SIEM, HIDS, and WAF telemetry
- Build and refine agentic alert-triage workflows
- Conduct daily written and live handoffs with the Singapore security team
Requirements
- 3+ years of SOC, incident response, or detection engineering experience
- Linux and Kubernetes knowledge
- SIEM query experience
- Python or Go scripting skills
- Experience with host-based detection tools, log analysis, and incident-response tooling
- Ability to participate in a weekend on-call rotation
