Automation & Data Visualization Specialist

The NETS Group is a leading payments services group, enabling digital payments for merchants, consumers and banks across the entire payments value chain. The Group operates Singapore’s national debit scheme enabling customers of DBS Bank/POSB, HSBC, Maybank, OCBC Bank, Standard Chartered Bank and UOB to make payments using their ATM cards or mobile devices at more than 130,000 acceptance points in the country as well as online payments.

Key Responsibilities

SOC Automation & Engineering Design and implement automation solutions to eliminate manual, repetitive SOC tasks (alert triage, enrichment, reporting, investigations). Develop and maintain integrations across SIEM, SOAR, EDR/XDR, ticketing, and threat intelligence platforms. Build reusable automation frameworks using Python, Power.

Shell, APIs, and workflow orchestration tools. Drive use-case automation (auto-enrichment, auto-response, playbooks) to improve SOC efficiency and response time. Establish automation standards, governance, and documentation. Data Engineering & Analytics Design and maintain SOC data pipelines, ensuring reliable ingestion, transformation, and normalization of security telemetry.

Perform data analysis to uncover trends, anomalies, and operational insights. Ensure data quality, integrity, and consistency across multiple security platforms. Support advanced analytics, including statistical analysis and basic machine learning use cases (where applicable). Dashboarding & Management Reporting Develop and maintain executive dashboards and visualizations (KPIs, KRIs, SLAs) for SOC performance.

Translate complex security data into clear, actionable insights for senior management. Automate generation of weekly/monthly SOC reports. Track metrics such as MTTD, MTTR, alert volumes, false positive rates, and threat trends. SOC Operations Enablement Work closely with SOC analysts to identify process inefficiencies and automation opportunities.

Improve triage workflows with automation, enrichment, and contextual data. Support incident response through data correlation and investigative tooling. Tooling & Platform Integration Integrate and optimize tools including: SIEM (e.g., Elastic, Log. Rhythm, Solarwinds) SOAR platforms EDR/XDR solutions Ticketing systems (Service.

Now, Jira, etc.) Leverage APIs and event-driven architectures to enable real-time data flow and orchestration. Leadership & Collaboration Serve as a technical lead and subject matter expert in SOC automation and data analytics. Mentor SOC engineers and analysts in automation and data literacy. Collaborate with Cyber Defence, IR, IT, Cloud, and Data teams to align data and automation strategies.

Act as a key contributor in SOC transformation initiatives. Required Qualifications & Experience 7+ years of experience in logic automation, cybersecurity, data engineering, or SOC Automation roles At least: 5+ years in SOC automation / security engineering / data analytics 3+ years in a senior or lead technical role Strong hands-on experience with: Programming/Scripting: Python (mandatory), Power.

Shell, Bash, Power. Apps, RPA, PowerBI API integrations (REST, JSON, etc.) Data processing libraries (e.g., Pandas) Experience with: SIEM platforms (Splunk, Elastic, Log. Rhythm, Solarwinds) SOAR platforms and playbook development Data visualization tools (Power BI, Tableau, Grafana, Kibana) Data engineering concepts (ETL pipelines, data odelling) Understanding of: (Good to have) SOC operations and workflows Incident response lifecycle Security telemetry and log sources Experience with: Cloud platforms (AWS, Azure, GCP) and associated logging/monitoring Automation in cloud-native environments is a plus Preferred Qualifications Experience in financial services, banking, or payment systems Knowledge of: MITRE ATT&CK framework Detection engineering concepts Exposure to: Process Automation, Data Visualizations for Reports Machine learning for anomaly detection Big data platforms (e.

g., Spark, Hadoop) Preferred Certifications Relevant certifications such as: GIAC (GCDA, GCIH, GMON) (Good to have) CISSP / CISM (Good to have) Microsoft Security / Azure certifications Splunk or SIEM-related certifications (Good to have) Automations, Data/analytics certifications (optional but advantageous) Key Competencies Focus on automation, scalability, and continuous improvement Strong hands-on engineering mindset Problem-solving and analytical thinking Ability to translate data into business insights Strong stakeholder communication (technical + management) Leadership and mentoring capability What Success Looks Like Significant reduction in manual SOC workload through automation Improved MTTD/MTTR and analyst productivity High-quality, reliable SOC dashboards and reporting for leadership Strong data-driven decision-making culture within SOC Scalable and maintainable automation frameworks and pipelines Network for Electronic Transfers (Singapore) Pte Ltd.