Cybersecurity Engineer (Detection Engineering)

Assurity Trusted Solutions (ATS) is a wholly owned subsidiary of the Government Technology Agency (GovTech). As a Trusted Partner over the last decade, ATS offers a comprehensive suite of products and services ranging from infrastructure and operational services, authentication services, governance and assurance services as well as managed processes. In a dynamic digital and cyber landscape, where trust & collaboration are key, ATS continues to drive mutually beneficial business outcomes through collaboration with GovTech, government agencies and commercial partners to mitigate cyber risks and bolster security postures.

We are looking for a Cybersecurity Engineer with a background in detection engineering to join us!

Responsibilities:

• Develop, implement, and document effective security detection rules — using languages/frameworks such as Sigma, KQL, SPL, EQL, or YARA as applicable to the deployed SIEM platforms — and playbooks to identify potential threats and malicious activity targeting government systems in on-premises and cloud environments.
• Conduct comprehensive and in-depth analysis of security logs and alerts from security monitoring (e.g. SIEM) and detection systems (e.g. EDR) deployed within the government environment, to differentiate true treats from benign activity and reduce false positives across network, endpoint, and cloud security domains
• Continuously improve detection capabilitie