The posting
What’s the role?
Bloomberg’s Cyber Security Operations Center (CSOC) plays a critical role in safeguarding the company’s digital environment, actively monitoring systems and networks for any signs of suspicious activity. When a confirmed incident occurs, CSOC leads containment and response efforts, formalizing lessons learned and hardening defenses against future attacks.
The Process & Technology Optimization (PTO) team within CSOC is at the forefront of designing, building, and integrating process and technology solutions to enable CSOC functions to thrive and improve. As a PTO staff member, you will play a crucial role in understanding the evolving challenges faced by CSOC teams, driving moonshot goals, and implementing scalable, innovative solutions that shape the future of cyber security operations at Bloomberg.
We will trust you to:
- Design & Implement Solutions
- Design, build, and test process and technology solutions for prioritized use cases, including automation content, platform configuration, and tooling integrations, from initial design through validation and deployment
- Maintain and troubleshoot the automation content, integrations, and configurations you own, adapting them when upstream platforms, vendor products, or data sources change
- Support the implementation and configuration of vendor-provided and internally developed products, keeping delivery consistent with the broader technology vision the team has set
- Document your work by maintaining SOPs, runbooks, and task-level documentation so others can support and extend what you’ve built
- Communicate progress, blockers, and observations to keep the team and requesting stakeholders informed
- Collaborate with senior PTO team members on design and technical decisions, drawing on their guidance and experience, and progressively take on greater independent ownership as you grow in the role
- Identify Optimizations
- Engage with CSOC functions (Event Analysis, Threat Hunting, Incident Response, Detection Engineering, Threat Intelligence, etc.) to understand the problem behind a requested automation, not just the request as stated
- Identify systemic issues and look for opportunities to re-engineer the underlying process rather than automate it as-is, documenting potential approaches and escalating for alignment when resolution needs broader prioritization
- Flag and escalate issues and gaps wherever you find them, whether in automation requirements, in technologies CSOC depends on, or in controls operated by other teams across the environment
- Serve as PTO’s on-the-ground presence in APAC, building strong relationships with the CSOC team and the broader set of stakeholders in the region while representing and delivering on priorities and direction that benefit CSOC as a whole
You’ll need to have:
- Technical Expertise
- 3+ years of experience in cybersecurity operations, or a related technical role (e.g., as a detection engineer, security engineer, or incident responder). Internal candidates with strong technical or engineering experience at Bloomberg are encouraged to apply, even if they do not have direct cybersecurity experience.
- Demonstrated, hands-on experience designing, building, and maintaining automations on a Low Code/No Code platform such as a SOAR
- Ability to read and write Python to a moderate skill level, sufficient to build, comprehend, and maintain automation content
- Practical exposure to technical products common to modern SOCs (e.g., Endpoint Detection & Response (EDR), Threat Intelligence Platforms, Email Analysis, Malware Sandboxing, Network Intrusion Detection, Data Loss Prevention)
- Experience with data storage and retrieval systems (e.g., SIEM, databases, data lakes, etc.)
- Ability to break down a complex process and identify concrete opportunities for improvement
- Ability to quickly learn and adapt to new technologies and products, given how frequently the security landscape evolves
- Bachelor’s degree or degree-equivalent qualification in Computer Science, Engineering, Information Technology, Cybersecurity, or a related technical discipline.
- Problem Solving & Critical Thinking
- Proven ability to dissect technical and operational problems into their component parts
- Curious, ambitious mindset with the drive to look past the literal ask and pursue the better underlying solution
- Collaboration & Communication
- Inquisitive and curious listener
- Clear and concise written and verbal communication in English
- Comfortable acquiring context from others and sharing it effectively across the team
- Demonstrated continuous career growth within an organisation
We’d love to see:
- Python or scripting skills sufficient to build custom integrations or work directly against vendor APIs when a low-code platform’s built-in actions fall short
- Hands-on experience administering or engineering one or more SOC product categories, such as EDR, Threat Intelligence Platforms, Email Analysis, Malware Sandboxing, Network Intrusion Detection, or Data Loss Prevention
- Experience applying version control or CI/CD practices to automation content, treating it with the same rigor as software
- Familiarity applying GenAI tools and capabilities to CSOC use cases, such as accelerating triage, summarization, or investigation workflows
If this sounds like you:
Apply if you think we're a good match. We'll get in touch to let you know what the next steps are, but in the meantime feel free to have a look at this: www.bloomberg.com/professional
Why Bloomberg?
We’re individuals with diverse backgrounds, talents, and experiences who take on big challenges and create even bigger impact through our work. We’re interested in what makes you you, and how we can create opportunities for you to channel your unique, personal energy and grow to your fullest potential.
Learn more about our office and benefits:
Singapore | www.bloomberg.com/singapore
