24/7 SOC Analyst: Threat Detection & Incident Response

OPUS IT Services Pte Ltd; Singapore; On-site; SGD 60,000 - 90,000; Full time

Job summary

OPUS IT Services Pte Ltd is seeking a SOC Analyst to join our 24x7 security operations. You will monitor alerts from Trend Micro, Microsoft Sentinel, and related tools, triage incidents, and coordinate containment according to playbooks.

This role also covers DLP, vulnerability management, and reporting. Candidates should have 2–4 years of SOC experience, a relevant degree, KQL/log analysis proficiency, and hands-on use of SIEMs and vulnerability scanners such as Tenable.

Qualifications

• 2–4 years in a SOC, security operations, or IT security role.
• Hands-on experience with a SIEM (Microsoft Sentinel preferred) and endpoint or XDR tools (Trend Micro preferred).
• Understanding of DLP concepts and the incident response lifecycle and MITRE ATT&CK.
• Certifications such as CompTIA Security+ or Trend Micro/Microsoft certifications are a plus.

Responsibilities

• Monitor alerts and dashboards across Trend Micro, Microsoft Sentinel, and other security tools.
• Triage alerts, separate true from false positives, and prioritise by severity and business impact.
• Investigate suspicious activity using log analysis, KQL queries, and threat intelligence.
• Escalate confirmed incidents to L2/L3 or the incident response team with clear evidence.
• Carry out initial containment per playbooks, such as isolating endpoints or blocking indicators.
• Tune detection rules and alert thresholds to reduce noise.
• Document incidents and investigations in the ticketing system and prepare security reports.

Skills

KQL queries

Log analysis

Incident response

Communication

Shift work

Education

Diploma or Bachelor's degree in Cybersecurity, IT, Computer Science, or related field

Tools

Microsoft Sentinel

Trend Micro

Tenable

ServiceNow

Job description

OPUS IT Services Pte Ltd is seeking a SOC Analyst to join our 24x7 security operations. You will monitor alerts from Trend Micro, Microsoft Sentinel, and related tools, triage incidents, and coordinate containment according to playbooks.

This role also covers DLP, vulnerability management, and reporting. Candidates should have 2–4 years of SOC experience, a relevant degree, KQL/log analysis proficiency, and hands-on use of SIEMs and vulnerability scanners such as Tenable.