Cyber Defence - Senior Analyst

A&O Shearman; Singapore; On-site; SGD 110,000 - 150,000; Full time

Job summary

A&O Shearman in Singapore is seeking a Senior Cyber Defence Analyst to join the Information Security team. The role focuses on in-depth analysis and rapid response to cyber security events within the 24/7 follow-the-sun model, including on-call duties and cross-time-zone handoffs.

The successful candidate will mentor junior colleagues, maintain and improve playbooks, and contribute to threat detection definitions while collaborating with IT and other teams to strengthen controls.

Qualifications

• Minimum 3 years in security operations or similar role.
• Experience across multiple domains: security engineering, alert triaging, incident response, DFIR, threat intel, vulnerability management, or security testing.

Responsibilities

• Investigate Level 2 escalations from MSSP or monitoring.
• Lead containment, mitigation and remediation of incidents with proper forensics.
• Participate in security incident response exercises and on-call rotations.
• Provide guidance to junior analysts and share knowledge across time zones.

Skills

Security operations

Incident response

Threat intelligence

DFIR

SIEM

Education

Bachelor's degree in Information Security

Tools

SIEM solutions

EDR

Threat intel platforms

Job description

We are seeking a Senior Cyber Defence Analyst to join the Information Security team at A&O Shearman in Singapore.

Please note that weekend working is a requirement for this role, with exact shift patterns to be discussed at interview.

The in-house Information Security team is a core part of our technology services structure with mature or evolving capability across all areas of digital security and cyber defence. We align our efforts to the NIST framework and other recognised certifications including ISO27001 and SOC2 and strive to keep pace with the continually evolving threat landscape, in support of A&O Shearman's strategy to lead where global complexity creates opportunity. The global team have experience advising clients on hundreds of incidents. Leveraging this experience, they feedback practical lessons learned into clients' cyber risk management and incident response programmes.

What You Will Do

The Cyber Defence Senior Analyst will reside within the firm's information security team and will be based in Singapore. They will perform a critical role in solidifying the firm's security posture, focusing on the in-depth analysis, and effective response to cyber security events and incidents within their time-zone. They will also contribute to the effectiveness and cohesion of the Cyber Defence team by providing guidance to, and sharing knowledge with, more junior Cyber Defence Colleagues.

Investigating Escalations

• Investigate Level 2 escalated events and alerts which have detected been through Level 1 monitoring activities by the firm's Managed Security Service Provider (MSSP) to identify potential incidents.
• Escalate these events further to senior colleagues and appropriate stakeholders when necessary.
• Assist and advise junior colleagues during investigations where additional experience is required.

Incident Response

• Conduct initial triage and investigation of confirmed incidents.
• Perform containment, mitigation, and remediation activities for incidents, ensuring that any required forensic evidence is gathered and documented appropriately along the process.
• Participate in security incident response exercises and contribute to post-exercise reviews.
• Be part of the Cyber Defence on-call rota, which may require out-of-hours work.
• Pick-up and hand-off incident response activities with the rest of the [location] Cyber Defence team to other teams in different time-zones across the globe, as per our 24-7 follow-the-sun global model.

Documentation and Process Improvement

• Maintain and improve playbooks and process documentation for Cyber Defence.
• Ensure documentation reflects current threat landscapes and operational practices.
• Implement and enhance cyber defence tooling and processes under senior oversight.
• Develop new detection definitions and use cases for monitoring tools.

Mentoring, Collaboration, and Support

• Mentor junior colleagues to support their professional development and operational effectiveness.
• Collaborate with other teams (e.g. Information Security, IT) to implement security controls and raise awareness.
• Support the Threat and Vulnerability Management team in remediation activities by executing system and configuration changes.
• Maintain awareness of current and emerging cyber threats, techniques, and procedures (TTPs) using threat intelligence insights from the Threat and Vulnerability Management team, applying this knowledge in daily operations.
• Provide cyber defence guidance to business stakeholders, translating technical concepts into business language.
• Maintain awareness of current and emerging cyber threats, techniques, and procedures (TTPs).
• Assist the Information Security GRC team with client queries and audits from a cyber defence perspective.

What You Will Have

• At least three years' experience in a security operations or similar technical security role.
• Operational-level experience in at least four of the following domains: Security engineering, Alert triaging, Rule writing, Incident response, Digital Forensics and Incident Response (DFIR), Threat intelligence and management, Vulnerability management, or Security control testing.
• Strong understanding of networking and routing protocols (e.g. TCP/IP) and core services (e.g. DNS, SMTP).
• Familiarity with cyber defence technologies and tooling, including:
• SIEM solutions
• Intrusion Detection & Prevention Systems (ID/PS)
• Threat and vulnerability management platforms
• Endpoint protection
• Firewalls
• Highly analytical mindset with the ability to interpret data flows, assess anomalies, and draw meaningful conclusions.
• Demonstrated ability to investigate complex security issues and propose effective solutions.
• Excellent verbal and written communication skills, translating cyber security terminology into professional and straightforward language suitable for a global law firm which includes technical and non-technical teams.
• High level of personal integrity and ethics, demonstrating an appropriate level of judgement, handling any potentially high-pressure situations in a manner which upholds the highest ethical standards.
• A genuine passion for continuous learning and development in cybersecurity, staying up-to-date with the latest developments, trends, and technologies in the field.

You will stand out if you bring

• Bachelor's degree in Information Security, Computer Science, Engineering, Technology, or a related field.
• Industry-recognised certifications such as:
• CISSP (Certified Information Systems Security Professional)
• CEH (Certified Ethical Hacker)
• CISM (Certified Information Security Manager)
• CompTIA Security+
• Experience working with major cloud service providers (CSPs) technologies, such as:
• Microsoft Azure
• Google Cloud Platform (GCP)
• Amazon Web Services (AWS)
• Prior legal firm or professional services firm experience
• Practical experience with scripting languages such as Python or PowerShell to support automation and tooling enhancements.

What We Can Offer You

To learn more about the culture and benefits available at A&O Shearman, please visit: Culture and benefits | A&O Shearman careers

Should you require additional support at any stage of the recruitment process due to a disability or a health condition, please do not hesitate to contact a member of our recruitment team who will work with you to provide any adjustments as required.

We are an equal opportunities recruiter and do not discriminate on the basis of race, colour, sex, religion, sexual orientation, national origin, disability, or any other protected characteristic.

NO AGENCIES PLEASE - A&O Shearman does not accept unsolicited CVs. For further information, please see our UK Recruitment Agency Policy and our commitment to direct sourcing here.