This role focuses on enhancing the efficiency and effectiveness of the Security Operations Centre (SOC) through automation and data visualization. The specialist will design, implement, and maintain solutions to streamline SOC tasks, develop robust data pipelines, and create insightful dashboards for management reporting. It suits a candidate with a strong engineering mindset and leadership capabilities in cybersecurity automation and data analytics.
Responsibilities
Design and implement automation solutions to eliminate manual, repetitive SOC tasks (alert triage, enrichment, reporting, investigations)
Develop and maintain integrations across SIEM, SOAR, EDR/XDR, ticketing, and threat intelligence platforms
Build reusable automation frameworks using Python, PowerShell, APIs, and workflow orchestration tools
Drive use-case automation (auto-enrichment, auto-response, playbooks) to improve SOC efficiency and response time
Establish automation standards, governance, and documentation
Design and maintain SOC data pipelines, ensuring reliable ingestion, transformation, and normalization of security telemetry
Perform data analysis to uncover trends, anomalies, and operational insights
Ensure data quality, integrity, and consistency across multiple security platforms
Support advanced analytics, including statistical analysis and basic machine learning use cases (where applicable)
Develop and maintain executive dashboards and visualizations (KPIs, KRIs, SLAs) for SOC performance
Translate complex security data into clear, actionable insights for senior management
Automate generation of weekly/monthly SOC reports
Track metrics such as MTTD, MTTR, alert volumes, false positive rates, and threat trends
Work closely with SOC analysts to identify process inefficiencies and automation opportunities
Improve triage workflows with automation, enrichment, and contextual data
Support incident response through data correlation and investigative tooling
Integrate and optimize tools including SIEM (e.g., Elastic, LogRhythm, Solarwinds), SOAR platforms, EDR/XDR solutions, and ticketing systems (ServiceNow, Jira, etc.)
Leverage APIs and event-driven architectures to enable real-time data flow and orchestration
Serve as a technical lead and subject matter expert in SOC automation and data analytics
Mentor SOC engineers and analysts in automation and data literacy
Collaborate with Cyber Defence, IR, IT, Cloud, and Data teams to align data and automation strategies
Act as a key contributor in SOC transformation initiatives
Requirements
7+ years of experience in logic automation, cybersecurity, data engineering, or SOC Automation roles
Millions of jobs, with real people getting hired every day
200,000+
New jobs added daily
7,000,000+
Verified job listings
1,000,000+
Tailored applications submitted
5+ years in SOC automation / security engineering / data analytics
Strong hands-on experience with API integrations (REST, JSON, etc.)
Strong hands-on experience with data processing libraries (e.g., Pandas)
Experience with SIEM platforms (Splunk, Elastic, LogRhythm, Solarwinds)
Experience with SOAR platforms and playbook development
Experience with data visualization tools (Power BI, Tableau, Grafana, Kibana)
Experience with data engineering concepts (ETL pipelines, data modelling)
Experience with cloud platforms (AWS, Azure, GCP) and associated logging/monitoring
Nice to have:
Understanding of SOC operations and workflows
Understanding of incident response lifecycle
Understanding of security telemetry and log sources
Automation in cloud-native environments
Experience in financial services, banking, or payment systems
Knowledge of MITRE ATT&CK framework
Knowledge of detection engineering concepts
Exposure to Process Automation
Exposure to Data Visualizations for Reports
Exposure to Machine learning for anomaly detection
Exposure to Big data platforms (e.g., Spark, Hadoop)
Benefits
Relevant certifications such as GIAC (GCDA, GCIH, GMON)
CISSP / CISM
Microsoft Security / Azure certifications
Splunk or SIEM-related certifications
Automations, Data/analytics certifications (optional but advantageous)
About the Company
The NETS Group is a leading payments services group, enabling digital payments for merchants, consumers and banks across the entire payments value chain. The Group operates Singapore’s national debit scheme enabling customers of DBS Bank/POSB, HSBC, Maybank, OCBC Bank, Standard Chartered Bank and UOB to make payments using their ATM cards or mobile devices at more than 130,000 acceptance points in the country as well as online payments.
