AI-Driven Cyber Defence Automation Analyst

Singtel; Singapore; On-site; SGD 60,000 - 90,000; Full time

Benefits offered by this job

CompTIA Security Analyst

GCIA

GCIH

Job summary

Singtel, a leading AI-first telco, seeks a Cyber Defence Automation Analyst in Singapore to monitor security alerts, analyse threats, and develop automation to reduce manual work. You will contribute to SOC effectiveness, document findings, and collaborate with security teams on incident response.

The role focuses on enhancing detections, automating repetitive tasks, and leveraging AI tools to improve security monitoring across networks and digital services.

Qualifications

• Diploma or Degree in Cybersecurity, Information Security, Computer Science, Information Technology, Computer Engineering or a related discipline.
• Fresh graduates and candidates with relevant cybersecurity experience are welcome to apply.
• Basic understanding of cybersecurity principles, common cyber threats and Security Operations concepts.
• Basic knowledge of networking, operating systems and security event analysis.
• Familiarity with cybersecurity monitoring technologies such as SIEM, EDR, IDS/IPS or related tools.

Responsibilities

• Monitor and analyse cybersecurity alerts, events and activities across security monitoring platforms.
• Perform alert triage and initial investigations to identify suspicious activities, potential security threats and operational abnormalities.
• Correlate relevant logs, security telemetry and contextual information to understand identified issues.
• Analyse security alerts and operational problems to identify potential causes, security gaps and associated risks.
• Evaluate available options and recommend appropriate corrective actions or solutions.
• Identify recurring alerts, false positives and operational inefficiencies that may affect monitoring effectiveness.
• Document investigation findings, risk assessments and recommendations accurately.
• Escalate significant, complex or high-risk security issues to senior Security Operations personnel.
• Support the maintenance and improvement of Security Operations procedures, runbooks and playbooks.
• Work with relevant technical teams to gather information and support the resolution of identified security issues.
• Identify opportunities to reduce repetitive manual activities and alert fatigue through automation.
• Develop and maintain basic automation workflows and playbooks using SOAR platforms or other approved automation tools.
• Explore and apply approved AI technologies to support alert enrichment, classification, summarisation and analysis.
• Analyse recurring alerts and recommend automation or detection improvements to reduce unnecessary alerts.
• Test and validate automation workflows to ensure accuracy, reliability and effectiveness before deployment.
• Work with senior team members to review and implement automation solutions in accordance with established change management and security requirements.
• Monitor the effectiveness of implemented automation and recommend further improvements.
• Maintain appropriate documentation for automation workflows, logic and operational procedures
• Provide support to senior Security Operations personnel during cybersecurity incidents as required.
• Gather and analyse relevant logs, alerts and supporting information as directed.
• Support assigned investigation and information-gathering activities under the guidance of incident responders.
• Document observations, findings and activities performed during incident investigations.

Skills

Cybersecurity fundamentals

Security monitoring

Threat analysis

Scripting basics

Teamwork

Education

Diploma or Degree in Cybersecurity or IT

Tools

SIEM

EDR

IDS/IPS

Job description

Singtel, a leading AI-first telco, seeks a Cyber Defence Automation Analyst in Singapore to monitor security alerts, analyse threats, and develop automation to reduce manual work. You will contribute to SOC effectiveness, document findings, and collaborate with security teams on incident response.

The role focuses on enhancing detections, automating repetitive tasks, and leveraging AI tools to improve security monitoring across networks and digital services.