Cyber Defense Center, Lead Analyst, AVP

VulnU; Singapore; On-site; SGD 180,000 - 260,000; Full time

Benefits offered by this job

Retirement match

Equity

Job summary

State Street invites an experienced Lead Analyst to join the Cyber Defense Center in Singapore. You will oversee detection, triage, analysis and response for major incidents, guiding a 24/7 SOC team and coordinating with Fusion Center partners.

The role emphasizes incident leadership, playbook upkeep, and cross-team collaboration to strengthen defenses, with on-site work and exposure to advanced cyber operations and threat intelligence.

Qualifications

• 4 years in cyber security SOC/IR roles.
• Experience leading SOC or Fusion Center teams.
• Familiar with NIST/Mitre ATT&CK frameworks.
• Financial services experience is a plus.

Responsibilities

• Lead the cyber incident response process from triage to containment and recovery.
• Provide status updates and closure reports to leadership.
• Develop and maintain incident response playbooks and procedures.
• Coordinate cyber exercises and tabletop simulations.
• Measure process performance using KRIs and KPIs.
• Mentor and train SOC personnel.
• Foster knowledge sharing across the Fusion Center.

Skills

Incident response

SOC leadership

Threat hunting

KPI metrics

Memory forensics

Education

Master's in Cyber Security

CISSP

Tools

SIEM

EDR

Forensics tools

Web proxies

Job description

# Cyber Defense Center, Lead Analyst, AVPState StreetCategory: Detection & ResponseLocation: Singapore, SingaporeLevel: Manager## Quality of lifeWhat the posting states. Hover or tap a perk to see the line it came from.* Retirement match* EquityWhat we do. State Street is one of the largest custodian banks, asset managers, and asset intelligence companies in the world. From technology to product innovation, we’re making our mark on the financial services industry. For more than two centuries, we’ve been helping our clients safeguard and steward the investments of millions of people. We provide investment servicing, data & analytics, investment research & trading and investment management to institutional clients.Who are we looking for:State Street seeks to recruit a Lead Cyber Security Operations Center (SOC) analyst that will assist in the detection, triage, analysis and response to cyber-attacks. The analyst will join our SOC team which will run a 24/7 coverage, 365 days a year model, with a partner team in Singapore.The SOC team is responsible for analyzing events from multiple sources across a large enterprise network. The SOC will partner with multiple teams in our Cyber Fusion Center including but not limited to Advanced Threat, Cyber Threat Intelligence, & Red/Purple teams.Join us in evolving our response capabilities to protect State Street, its customers and partners from ever evolving and sophisticated threat actors. State Street’s Fusion Center is responsible for detecting and responding to various cyber threats 24/7 365 days a year, that are directed towards the enterprise.This role will be Monday - Friday and will be on-site in State Street's office in Singapore. What will you be responsible for:Leading the cyber incident response process to ensure timely triage, analysis, containment, eradication, and return to service for high severity or long running incidents.Author incident status updates and closure reports to leadership.Produce postmortem reports to identify lessons learned and recommendations.Continuously prepare for incidents by updating and maintaining incident response plans, playbooks and procedures.Manage and participate in cyber related exercises such as tabletops and cyber ranges.Measure the effectiveness and performance of the incident response process through KRI and KPI metrics.Identify methods to continuously enhance the incident response processWork closely with the SOC to drive development and collaborationTrain and Mentor SOC personnelCreating an environment which drives knowledge sharing with teams across the Fusion CenterHelp developing the Fusion Center mindset and follow the sun model What we value:Experience with investigating & managing major/complex cyber incidents end to endExperience working/leading in a SOC or Fusion CenterStrong operating systems administration skills (Windows, Linux, Mac)Strong malware analysis expertiseExperience in performing memory forensicsKnowledge of adversarial tactics, techniques, procedures (TTPs) & Industry standard frameworks (NIST, Mitre Att&ck)Knowledge of IT architecture and operations (computing, network, storage & cloud)Strong working knowledge of security technologies including but not limited to SIEM, EDR/EPP, AV, ID/PS, HIPS, Web Proxy/Content filtering, AD, PKI and DNSMaster's in cyber security, Information Technology, Computer Science or relevant experienceCISSP, CEH, OSCP, OSCE or GCIH or applicable certification in Security field4 years in cyber security SOC/IR type skill role – Incident Response, SOC Tier 3/Lead Analyst, Threat Hunter, Penetration testing, etc.Financial Services experience a plus.Software development and/or scripting experience a plus: Python, Powershell, SQL etc.