Lead Security Systems Engineer (Microsoft Sentinel)
EPAM SYSTEMS PTE. LTD. · Singapore ·
- Seniority
- Lead
- Category
- Software engineering
- Company size
- 501-1000
Lead a security operations center using Microsoft Sentinel to build detections, triage incidents, and manage an outsourced SOC, while improving detection quality and response metrics.
About EPAM
EPAM is a leading global provider of digital platform engineering and development services. EPAM has been expanding in Singapore since 2013 and delivering the best solutions to our customers. As a recognized leader, EPAM Singapore achieved Great Place to Work® Certification in 2023 and is committed to providing our team with inspiring careers.
You will have the opportunity to work with fellow talented technologists and accelerate your career by participating in our numerous upskilling, training, and certification programs. That is why EPAM Singapore was awarded Gold for Best In-House Certification Programmes in the Employee Experience Awards 2023 and Silver in the SkillsFuture Employers Awards 2022 for our efforts in championing employees' skills development and building a lifelong learning culture at the workplace. You can also look forward to developing holistically with the multiracial festivals and various wellness and cultural activities organized by our passionate colleagues here.
Why EPAM?
- By choosing EPAM, you're getting a job at one of the most loved workplaces according to Newsweek 2022 & 2023.
- Employee ideas are the main driver of our business. We have a very supportive environment where your voice matters.
- You will be challenged while working side-by-side with the best talent globally. We work with top-notch technologies, constantly seeking new industry trends and best practices.
- We offer a transparent career path and an individual roadmap to engineer your future & accelerate your journey.
- At EPAM, you can find vast opportunities for self-development: online courses and libraries, mentoring programs, partial grants of certification, and experience exchange with colleagues around the world. You will learn, contribute, and grow with us.
What You’ll Do
- Own Microsoft Sentinel detections including analytics rules, workbooks and Kusto Query Language (KQL) queries
- Lead day-to-day SOC and incident operations with an outsourced SOC/MDR vendor including SLAs, escalations and service reviews
- Validate log source coverage across endpoint, identity, network, cloud and critical business systems
- Triage and coordinate incident response from assessment through containment, remediation and closure in Jira Service Management
- Improve signal quality by reducing false positives and tracking Mean Time to Detect and Mean Time to Respond
- Run post-incident reviews and update detections, runbooks and incident response playbooks
- Own vulnerability scanning cadence, maintain a remediation register and track patching against agreed SLAs
- Mentor and support the Security Operations Analyst while building repeatable, audit-ready processes
What Will Make You Shine
- Proven experience leading security operations in a hands-on capacity
- Strong background in Microsoft Sentinel including rule tuning, workbooks, hunting and detection engineering
- Hands-on experience with Microsoft Defender for Endpoint and Microsoft Defender for Cloud
- Demonstrated ability to manage an outsourced SOC/MDR service including escalations and performance governance
- Knowledge of incident response practices including severity assessment, coordination and post-incident reviews
- Experience with Jira Service Management and end-to-end ticket lifecycle ownership
- Strong understanding of Vulnerability Management including scanning, remediation tracking and patch governance
- Clear communication with confidence translating operational metrics into management-ready reporting
Nice to Have
- Experience in a regulated environment such as financial services, asset management or a hedge fund
- Tenable Nessus or comparable vulnerability scanning tooling
- Darktrace or network anomaly detection tooling
How We Hire
Here, we summarize the typical journey to finding a job within EPAM:
- Apply and tell us about yourself
- Go through some standard interviews:
- General interview with a recruiter
- Technical interview with our technology experts
- Manager interview or Offer interview with a hiring manager
- Get ready to join the team
Not sure if you meet all the requirements? No problem. Let’stalk anyway and find out more.
It takes 1 min of application to start the journey with us. Apply now!