Senior Security Operations Engineer, AIDC

About Bitdeer: Bitdeer is a world-leading technology company for Bitcoin mining and AI cloud. Bitdeer is committed to providing comprehensive Bitcoin mining solutions for its customers. Apart from designing industry-leading ASIC chips and manufacturing mining rigs, the Group handles complex processes involved in computing across the value chain. This includes equipment procurement, transport logistics, datacenter design and construction, equipment management, and network and facility operations. Bitdeer also offers advanced cloud capabilities to customers with a high demand for artificial intelligence. Headquartered in Singapore, Bitdeer operates globally with a diversified 3 GW energy portfolio, and deploys Bitcoin mining and HPC datacenters in the United States, Bhutan, Norway, Canada, Malaysia, and Ethiopia. About the team： Bitdeer AI Cloud's security team is expanding its Asia-Pacific security operations capabilities. This role owns the full-stack security operations for Asian AI data centers (AIDCs), covering detection engineering, incident response, host and network hardening, vulnerability management, and security tooling development. You will serve as a critical node in our global 7×24 security operations, coordinating with Americas and European security teammates to ensure continuous monitoring across all AIDCs worldwide. If you want to work on the front lines of security operations for GPU clouds, InfiniBand high-speed networks, and large-scale GPU clusters — hands-on from writing detection rules to driving live incident response — this role is built for you. What you will be responsible for: Security Monitoring & Incident Response • Own security alert monitoring, triage, and incident response for Asian AIDCs (7×24 on-call rotation). Provide global AIDC alert coverage during Americas and Europe off-hours. • Independently handle L2/L3 security incidents including anomalous GPU utilization and cryptojacking, SSH brute force and anomalous login, container escape events, IB/RoCE network anomalies, and BMC out-of-band unauthorized access. • Participate in P0/P1 incident response, executing forensics, containment, and recovery operations. • Maintain and update Asia regional incident response playbooks and runbooks. Participate in quarterly IR tabletop exercises. • Own post-incident reviews, producing root cause analysis reports and driving closed-loop remediation. Detection Engineering & SIEM/HIDS Operations • Operate the SIEM platform (Wazuh / Splunk / Elastic SIEM or equivalent) daily — detection rule tuning, false positive suppression, log source onboarding, and health monitoring. • Independently write detection rules covering GPU cloud attack vectors — cryptomining process signatures, anomalous GPU utilization patterns, unauthorized NCCL communications, Kubernetes API anomalous calls, SSH key injection anomalies, and more. • Operate HIDS and eBPF runtime security tools (Tetragon / Falco) — agent deployment coverage, alert…