Cyber Defense Engineer - 24/7 Threat Hunter & IR

Alliance Healthcare Group Limited; Singapore; On-site; SGD 60,000 - 100,000; Full time

Job summary

Alliance Healthcare Group Limited is seeking a Security Operations Centre professional to monitor information assets around the clock, detect threats, and coordinate incident response. You will automate triage, hunt for IOCs, and collaborate with vendors and clients on IR activities in a dynamic, patient-focused environment in Singapore.

Role requires 2 years in SOC/CERT/CIRT, strong scripting ability, and knowledge of MITRE ATT&CK, Cyber Kill Chain, and DevSecOps.

Qualifications

• Degree or Diploma in Computer Science, Computer Engineering, or Information Security related fields.
• 2 years of experience working in a SOC/CERT/CIRT.
• Relevant industry certification (e.g., CISSP, CISM, CRISC) desirable; scripting a plus.
• Working knowledge of OWASP Top 10, CVSS, MITRE ATT&CK, Cyber Kill Chain, DevSecOps.
• Good knowledge of network types and incident response methodologies.
• Strong troubleshooting, analytical and problem-solving skills.
• Change management and security patching processes knowledge.
• Team player with good communication and interpersonal skills.

Responsibilities

• Round-the-clock surveillance of information assets using cyber defence tools.
• Detect, identify, and alert on attacks, intrusions, and anomalous activities.
• Use cyber defence tools for continuous monitoring and analysis.
• Analyse and respond to threats and vulnerabilities.
• Develop scripts and fine-tune SIEM rules to automate triage.
• Provide incident response support when required.
• Produce actionable cyber threat intel from various sources.
• Hunt for IOCs and TTPs in the environment.
• Investigate alerts to determine scope and response.
• Contain and mitigate threats per IR playbooks.
• Serve as point of contact during security incidents for stakeholders.
• Handle Change Requests and Service Requests.
• On-board users and applications within PAM.
• Assist in incident handling with vendors and clients.
• Stay abreast of threats, vulnerabilities and regulatory requirements.
• Participate in cybersecurity exercises and document operations.
• Ensure comprehensive coverage of cybersecurity areas.

Skills

SOC

CERT/CIRT

Python

Bash

PowerShell

Incident response

MITRE ATT&CK

Cyber Kill Chain

DevSecOps

Networking basics

Change management

Security patching

Education

Degree or Diploma in Computer Science/Information Security

Tools

EDR

SIEM

Threat intel sources

Job description

Alliance Healthcare Group Limited is seeking a Security Operations Centre professional to monitor information assets around the clock, detect threats, and coordinate incident response. You will automate triage, hunt for IOCs, and collaborate with vendors and clients on IR activities in a dynamic, patient-focused environment in Singapore.

Role requires 2 years in SOC/CERT/CIRT, strong scripting ability, and knowledge of MITRE ATT&CK, Cyber Kill Chain, and DevSecOps.