Assistant Lead Engineer - SOC Operations (Cyber Ops & Technologies)

Synapxe; Singapore; On-site; SGD 60,000 - 90,000; Full time

Job summary

A national HealthTech agency in Singapore seeks a SOC Operations Engineer to enhance security operations. The role involves 24/7 monitoring and incident response, requiring strong knowledge in security tools like SIEM and several years of SOC experience. Ideal candidates will excel in communication and teamwork and should be comfortable with shift work, including weekends and public holidays.

Qualifications

• At least 3 to 8 years in SOC environment.
• Strong experience monitoring security events and alerts.
• Must be willing to work 12-hour shifts including weekends and holidays.

Responsibilities

• Conduct continuous monitoring of security events using SIEM and endpoint protection.
• Perform initial triage of security alerts to determine validity and severity.
• Maintain detailed records of investigations and remediation steps.

Skills

Knowledge in SIEM tools

Incident response

Interpersonal skills

Communication skills

Tools

EDR

NDR

Job description

Company description:

Synapxe is the national HealthTech agency inspiring tomorrow's health. The nexus of HealthTech, we connect people and systems to power a healthier Singapore.

Together with partners, we create intelligent technological solutions to improve the health of millions of people every day, everywhere. Reimagine the future of health together with us at www.synapxe.sg

Job description:

Role & Responsibilities

• Conduct 24/7 continuous monitoring of security events and alerts using various security tools, such as SIEM and endpoint protection
• Perform initial triage of security alerts to determine their validity and severity, identifying false positives or true positives
• Conduct basic investigations of security events, including malware infections and unauthorized access attempts
• Escalate complex or highly suspicious alerts for further investigation and response
• Maintain details records of all activities, including investigations performed, findings and remediation steps taken
• Collects data, evidence, and context necessary for further escalation
• Analyze security logs, events and perform correlation and historical searches to determine the extent and impact of a security compromise
• Handling case management, generating tickets and reports when required, and tracking open tickets until closure
• Investigate and respond to security alerts escalated, performing root cause analysis, and providing remediation guidance
• Escalate critical cases to incident response team and to provide support where needed.
• Prepare scheduled and ad-hoc reports
• Quality assurance on cases handled and closed by junior SOC analyst
• Develop/strengthen playbook and process for case handling by the SOC team
• Assist in identifying opportunities for tuning to improve detection accuracy and reduce false positives
• Willing to work with 12 hours shift pattern that include weekend and public holiday

Requirements

• At least 3 to 8 years' of experience working in SOC environment
• Strong knowledge and experience in SIEM tools, EDR, NDR
• Strong experience in SOC environment, monitoring security events and alerts on endpoint and network
• Must be willing to work with 12 hours shift pattern that include weekend and public holiday
• Strong Interpersonal and communication skills

Apply Now

NOTE: It only takes a few minutes to apply for a meaningful career in HealthTech - GO FOR IT!!

#LI-SYNX13

Profile description:

Position Overview

The SOC operations function is responsible for planning and overseeing monitoring and maintenance of security operations, providing direction and leadership to internal resources. The Operations Engineer provides expertise on security technologies and innovative security concepts and works toward enhancing the resilience of security operations. They coordinate ongoing reviews of existing security programs, protocols, and planned upgrades. They establish escalation processes for security incidents and develop contingency plans and disaster recovery procedures, focusing on policy implementation and control.