Senior Security Operations Engineer

About dtcpay

dtcpay is a MAS-licensed payment service provider that integrates traditional finance with digital assets. We enable businesses to process payments in fiat and digital currencies, ensuring secure, efficient, and smooth cross-border transactions. Recognized as one of Singapore’s Top 10 Startups in LinkedIn Top Startups 2025, we are rapidly growing and shaping the future of digital payments.

Role Overview

We seek a proactive, hands-on Senior Security Operations Engineer to join our Security team. You will safeguard our production systems by monitoring security events, responding to incidents, managing security tools, and enhancing our security posture continuously. Collaboration with infrastructure, engineering, and compliance teams is essential to detect threats, investigate incidents, fortify defenses, and support enterprise-wide security initiatives.

Responsibilities

• Monitor security alerts and events, analyze threats, and respond to incidents to maintain systems’ security and uptime.
• Operate and optimize security platforms, including SIEM, EDR, WAF, firewalls, NDR, and bastion hosts.
• Perform thorough investigations of security incidents via triage, root cause analysis, remediation, and produce post-incident reports.
• Conduct regular security and vulnerability assessments, including penetration testing of web, mobile applications, APIs, and firmware.
• Identify, validate, and fix security weaknesses collaborating closely with engineering teams.
• Stay abreast of emerging cyber threats, threat intelligence, and vulnerabilities, including zero-day exploits, evaluating their business impact.
• Support enterprise security programs, compliance audits, and governance frameworks.
• Promote cybersecurity awareness by assisting in phishing simulations, user education, and training activities.
• Continuously refine detection rules, monitoring capabilities, and incident response methods.

Qualifications

• Bachelor's degree in Computer Science, Information Security, Cybersecurity, or a related field.
• At least 5 years of experience in Security Operations Centers (SOC), cybersecurity, or penetration testing roles.
• Exceptional analytical and problem-solving abilities, with capability to perform under pressure.
• Willingness to participate in on-call and incident response rotations as needed.
• Proficient with penetration testing and vulnerability assessment tools such as Burp Suite, Nmap, Nessus, AWVS, or equivalents.
• Comprehensive understanding of web app security vulnerabilities like SQL Injection, XSS, CSRF, SSRF, RCE, and authentication/authorization issues.
• Hands-on experience managing enterprise security solutions including SIEM, EDR, WAF, firewalls, NDR, and bastion hosts.
• Experience conducting security monitoring, incident investigation, threat hunting, and root cause analysis.
• Proficient in Python for security automation or tooling; developing utilities, scanners, or proof-of-concept tools is a plus.
• Knowledge of mobile application security testing or reverse engineering is favorable.
• Experience securing cloud infrastructures such as AWS, Alibaba Cloud, or Tencent Cloud is advantageous.
• Fluency in English and Mandarin to collaborate effectively with Chinese vendors.
• Role requires full onsite presence in Singapore office.

Additional Advantages

• Security certifications such as OSCP, CEH, CISSP, GSEC, or equivalent.
• Track record of published vulnerabilities with CVE, CNVD, or other recognized programs.
• Experience with source code security analysis tools like Fortify SCA, Cppcheck, or similar.
• Familiarity with compliance frameworks including MLPS, ISO 27001, PCI DSS, or equivalents.
• Background in delivering security awareness training or conducting cybersecurity workshops.