Senior IT Security Analyst

GREEN LINK DIGITAL BANK PTE. LTD.; Pasir Panjang; On-site; MYR 80,000 - 120,000; Full time

Job summary

A leading digital bank in Singapore seeks an experienced cybersecurity professional to lead vulnerability management and security operations. The ideal candidate will have a degree in a relevant field, 5-8 years of experience, and proficiency in vulnerability scanning tools. This role involves managing security incidents, performing threat analysis, and ensuring regulatory compliance. A strong understanding of cybersecurity frameworks and excellent analytical skills are essential. Competitive compensation offered.

Qualifications

• 5-8 years of progressive experience in cybersecurity roles, focusing on Vulnerability Management.
• Proven hands-on experience with vulnerability scanning tools.
• Strong understanding of security frameworks like NIST and ISO 27001.

Responsibilities

• Lead comprehensive vulnerability assessments across systems and environments.
• Develop strategies for continuous vulnerability monitoring and reporting.
• Manage security incidents from detection through recovery.

Skills

Vulnerability Management

Cyber Security Expertise

Incident Response

Analytical Skills

Communication Skills

Education

Bachelor’s degree in Computer Science or related field

Tools

Nessus

Qualys

SIEM platforms (e.g., Splunk, QRadar)

EDR solutions (e.g., CrowdStrike)

Job description

About Us

Green Link Digital Bank is Singapore's inaugural wholesale digital bank focusing on supply chain finance, mainly serving MSMEs and aiming to help MSMEs grow and improve digitization.

Responsibilities

• Lead and execute comprehensive vulnerability assessments, and security scanning across various systems, applications, networks, and cloud environments.
• Analyse scan results, prioritize vulnerabilities based on risk, and work closely with IT, development, and business teams to ensure timely remediation.
• Develop and implement strategies for continuous vulnerability monitoring and reporting.
• Manage and optimise vulnerability management tools and platforms.
• Stay current with the latest vulnerability trends, exploits, and threat intelligence.
• Perform advanced threat hunting, incident detection, and analysis using Security Information and Event Management (SIEM) systems, Endpoint Detection and Response (EDR) tools, network intrusion detection/prevention systems (IDS/IPS), and other security technologies.
• Lead and manage security incidents from detection through containment, eradication, recovery, and post-incident analysis.
• Develop, refine, and maintain incident response playbooks and standard operating procedures (SOPs).
• Conduct forensic analysis of security incidents to determine root causes and recommend preventative measures.
• Contribute to the continuous improvement of SOC processes, tools, and capabilities.
• Evaluate internal and external environments for security threats and vulnerabilities, acting as a subject matter expert to ensure they are properly addressed.
• Collaborate with cross-functional teams (IT, Development, Infrastructure, etc.) to implement security best practices and secure system configurations.
• Participate in security audits and provide support for compliance initiatives.
• Recommend and implement security enhancements to strengthen the overall security posture.
• Contribute to the development of security awareness training for staff.
• Lead security-related projects and initiatives as assigned.

Requirements

• Bachelor’s degree in Computer Science, Cyber Security, Information Systems, Information Technology, Engineering, or equivalent education.
• 5-8 years of progressive experience in cybersecurity roles, with a strong focus on Vulnerability Management and Security Operations Center (SOC) functions.
• Proven hands-on experience with vulnerability scanning tools (e.g., Nessus, Qualys, Rapid7 Nexpose, InsightVM) and penetration testing methodologies.
• Expertise in analysing security alerts, logs, and network traffic for suspicious activity.
• In-depth knowledge of SIEM platforms (e.g., Splunk, QRadar, Azure Sentinel) and EDR solutions (e.g., CrowdStrike, Microsoft Defender ATP).
• Strong understanding of security frameworks and standards (e.g., NIST, ISO 27001, MITRE ATT&CK).
• Experience with incident response processes, including detection, analysis, containment, eradication, and recovery.
• Familiarity with network protocols, operating systems (Windows, Linux), and cloud security concepts (AWS, Azure, GCP).
• Excellent analytical, problem-solving, and critical thinking skills.
• Strong communication and interpersonal skills, with the ability to articulate complex technical information to diverse audiences.
• Ability to work independently and collaboratively in a fast-paced, dynamic environment.
• Demonstrable deep understanding of the Singapore Banking regulatory landscape and requirements.
• Preferably a holder of one or more of the following information security qualifications: CISSP, CEH, GCIH, GCIA, BTL2, CCD and etc.
• Able to multi-task and prioritize in a high-pressure environment.
• Able to get results through collaboration and partnership with diverse teams.
• Able to work independently.

By submitting your application, you have given your consent for us to collect, use and retain your data for a year as according to our prevailing data retention and PDPA policies. Should you have any enquiries on our data policy, please contact us at [e-mail].