Job Responsibilities

Monitor and analyse security alerts from SIEM, EDR, NDR and other security monitoring platforms.
Perform initial investigation, triage and classification of security alerts to identify potential cyber threats and incidents.
Escalate security incidents to Level 2 analysts and relevant stakeholders in accordance with established procedures and SLAs.
Conduct initial incident investigation, including log analysis, threat intelligence enrichment and identification of affected systems.
Execute pre-approved containment actions in accordance with established Standard Operating Procedures (SOPs).
Maintain accurate incident records, investigation findings and escalation details in designated case management systems.
Perform structured shift handovers to ensure continuity of security monitoring and incident management.
Identify false positives and recommend improvements to detection rules, SOPs and monitoring processes.
Support cybersecurity exercises, operational readiness activities and continuous improvement initiatives.

Job Requirements

Singapore Citizen or Permanent Resident residing in Singapore.
Minimum 2 years of relevant SOC operations experience.
Hands-on experience with SIEM platforms such as Splunk, IBM QRadar, Google SecOps or equivalent.
Familiarity with EDR, NDR and other cybersecurity monitoring tools.
Good understanding of cybersecurity threats, incident response processes and the MITRE ATT&CK framework.
Strong analytical, troubleshooting and incident documentation skills.
Good written and verbal communication skills in English.
Able to work onsite in Tampines on 12-hour rotating shifts, including weekends and public holidays.
Must be able to obtain and maintain the required security clearance.
Relevant cybersecurity certifications such as CompTIA Security+, GCIH, Splunk certifications or equivalent will be advantageous.

Job description provided by Ensign InfoSecurity.
View the original posting