24/7 SOC Analyst: Threat Detection & Incident Response

ST ENGINEERING INFO-SECURITY PTE. LTD.; Singapore; On-site; SGD 55,000 - 90,000; Full time

Job summary

ST ENGINEERING INFO-SECURITY PTE. LTD. is seeking an MSSP SOC Analyst to reinforce the first line of defense against cyber threats. You will monitor, triage, and document incidents, using SIEMs and other security tools, while coordinating with SOC leads and customers in a 24/7 environment.

You will investigate, contain, and remediate security events, perform threat hunting, and continually improve SOC processes and playbooks. Ang Mo Kio location supported.

Qualifications

• Basic knowledge of security tools such as SIEMs, IDS/IPS, firewalls, and antivirus systems.
• Strong attention to detail and ability to handle multiple tasks efficiently.
• Effective communication and teamwork skills to interact with internal teams and external stakeholders.
• A collaborative mindset to work effectively with other SOC tiers and managers.
• Strong analytical and problem-solving skills to address complex security challenges.
• Commitment to continuous learning to stay updated with the latest security trends and technologies.
• Adherence to SOC playbooks, standard operating procedures, and compliance requirements.
• Willingness to work in a dynamic 24/7 SOC environment

Responsibilities

• Incident Monitoring and Detection: Proactively monitor logs, data, link utilization, and system availability across SIEMs or security tools.
• Detect and identify potential security incidents using pre-defined rules and correlation.
• Conduct blacklist scanning, keyword ingestion, and fine-tuning of SIEM rules for improved accuracy.
• Incident Management: Investigate and triage alerts to determine the severity and impact of security events.
• Document detailed assessments and actions taken in incident tickets.
• Perform in-depth investigations and analysis.
• Correlate threat intelligence to identify threat actors, the nature of attacks, and affected systems or data.
• Define and execute containment, remediation, and recovery strategies for internal SOC operation system alerts.
• Perform pre- and post-incident analysis to improve processes and reduce future risks.
• Customer Interaction: Handle customer phone calls and respond to escalation emails.
• Maintain proactive communication with customers, Customer Success Managers (CSMs), SOC Lead, and SOC Manager to drive improvements.
• Collaboration and Process Improvement: Work closely with SOC Leads, and SOC Managers to ensure incidents are effectively mitigated and resolved.
• Participate in feedback sessions and process improvement reviews to enhance workflows.
• False Positive Management: Identify and assess false positives, providing evidence-based assessments and recommendations.
• Escalate findings to SOC Lead and SOC Manager for discussion and resolution.
• Threat Hunting and Incident Analysis: Actively hunt for threats, identify unknown vulnerabilities, and close security gaps within networks.
• Identify all security attack vectors, classify incidents, and assess their impact.
• Proactively update documentation, processes, workflows, and other operational aspects for continuous improvement.

Skills

Attention to detail

Effective communication

Teamwork

Analytical thinking

Problem solving

Continuous learning

Adherence to SOPs

24/7 SOC readiness

Tools

SIEMs

IDS/IPS

Firewalls

Antivirus systems

Job description

ST ENGINEERING INFO-SECURITY PTE. LTD. is seeking an MSSP SOC Analyst to reinforce the first line of defense against cyber threats. You will monitor, triage, and document incidents, using SIEMs and other security tools, while coordinating with SOC leads and customers in a 24/7 environment.

You will investigate, contain, and remediate security events, perform threat hunting, and continually improve SOC processes and playbooks. Ang Mo Kio location supported.