Cybersecurity SOC Analyst (DSC/JH)

ST ENGINEERING INFO-SECURITY PTE. LTD; Hong Kong; On-site; HKD 296,000 - 444,000; Full time

Job summary

ST ENGINEERING INFO-SECURITY PTE. LTD in Ang Mo Kio is seeking a Cyber Security Analyst to help monitor, triage, and document security incidents. You will work with SOC teams to detect threats, tune SIEM rules, and escalate complex events as needed.

The role emphasizes collaboration with SOC Leads and 24/7 shift coverage, with a focus on continuous learning and adherence to playbooks and SOPs. Entry-level candidates are welcome to apply.

Qualifications

• Basic knowledge of security tools (SIEMs, IDS/IPS, firewalls, antivirus)
• Strong attention to detail and multi-tasking
• Effective communication and teamwork with internal/external stakeholders
• Collaborative mindset to work with SOC tiers and managers
• Strong analytical and problem-solving skills for security challenges
• Commitment to continuous learning on security trends and technologies
• Adherence to SOC playbooks, SOPs, and compliance requirements
• Willingness to work on a 24/7 rotating shift schedule
• Entry-level candidates are welcome to apply

Responsibilities

• Monitor logs, data, link utilization, and system availability across security tools
• Detect potential security incidents using predefined rules and correlations
• Tune SIEM rules for better accuracy
• Investigate and triage alerts to determine severity and impact
• Document assessments and actions in incident tickets
• Escalate complex incidents to Senior Security Analyst
• Use templates but tailor escalation emails based on investigations
• Handle customer calls and escalation emails
• Collaborate with SOC Leads/Managers to mitigate incidents
• Participate in process improvement reviews to enhance workflows

Skills

Security monitoring

Threat analysis

Communication

Teamwork

Analytical thinking

Learning agility

SOC processes

Shift work

Tools

SIEMs

IDS/IPS

Firewalls

Antivirus

Job description

Cyber Security Analyst

The Cyber Security Analyst plays a critical role in the first line of defense against cybersecurity threats. The role involves proactive monitoring, initial triage, and documentation of security incidents. Analysts will utilize various security tools and systems to detect, analyze, and escalation threats as required while ensuring effective communication and collaboration across the SOC team.

Responsibilities

Incident Monitoring and Detection

• Perform proactive monitoring of logs, data, link utilization, and system availability across multiple SIEMs or security tools.

• Detect and identify potential security incidents using pre-defined rules and correlation.

• Conduct blacklist scanning, keyword ingestion, and fine-tuning of SIEM rules for improved accuracy.
  

Incident Management

• Investigate and triage alerts to determine the severity and impact of security events.

• Document detailed assessments and actions taken into incident tickets.

• Escalate incidents that require further investigation or resolution toSenior Security Analyst.

• Use standardized templates as a base but proactively amend escalation emails based on current investigations and analysis without referring to past emails.
  

Customer Interaction

• Handle customer phone calls and respond to escalation emails.

• Prepare standardized escalation email templates for efficient communication.
  Collaboration and Process Improvement:

• Work closely with SOC Leads, and SOC Managers to ensure incidents are effectively mitigated and resolved.

• Participate in feedback sessions and process improvement reviews to enhance workflows.

Requirements

• Basic knowledge of security tools such as SIEMs, IDS/IPS, firewalls, and antivirus systems.

• Strong attention to detail and ability to handle multiple tasks efficiently.

• Effective communication and teamwork skills to interact with internal teams and external stakeholders.

• A collaborative mindset to work effectively with other SOC tiers and managers.

• Strong analytical and problem-solving skills to address complex security challenges.

• Commitment to continuous learning to stay updated with the latest security trends and technologies.

• Adherence to SOC playbooks, standard operating procedures, and compliance requirements.

• Willingness to work on a 24/7 rotating shift schedule.

• Entry-level candidates are welcome to apply.

Work Location

Ang Mo Kio.