Cyber Security Analyst

MSI GLOBAL PRIVATE LIMITED; Singapore; On-site; SGD 60,000 - 80,000; Full time

Job summary

A leading cyber security firm based in Singapore is seeking a Cyber Security Analyst (CSA) responsible for securing on-premises, cloud, and hybrid environments. This role involves monitoring, conducting vulnerability assessments, providing technical expertise in security, and supporting DevSecOps practices. The ideal candidate has strong threat hunting skills and experience with cloud security tools and methodologies. Certifications like CCSP or CISSP are preferred to enhance your qualifications.

Qualifications

• 3–5 years in security analysis, including 2+ years securing cloud environments.
• Technical proficiency in AWS, Azure, or GCP security services.
• Strong threat hunting skills in cloud and hybrid environments.

Responsibilities

• Monitor cloud and hybrid environments to detect and mitigate cyber-attacks.
• Provide technical expertise on cloud-native security tools.
• Conduct vulnerability assessments across cloud workloads.

Skills

Cloud security expertise

Threat hunting

Vulnerability management

Network security

Automation/scripting (Python, PowerShell)

Education

Bachelor’s degree in IT/Cybersecurity or equivalent

Tools

AWS security services

Azure Sentinel

GCP Security Command Center

Tenable.io

Terraform

Kubernetes

Job description

The Cyber Security Analyst (CSA) is responsible for securing the organization’s on-premises, cloud, and hybrid environments. Reporting to the Information Security Manager, the CSA provides technical expertise in network, system, application, and cloud security. The CSA collaborates cross‑functionally to ensure systems are designed, deployed, and managed with robust security controls. This role leads vulnerability management, conducts cloud security assessments, manages penetration tests, researches emerging threats (including cloud‑specific risks), and analyses security events to proactively mitigate attacks.

Key Responsibilities

• Proactively monitor cloud (IaaS/PaaS/SaaS), on‑premises, and hybrid environments to detect and mitigate cyber‑attacks.
• Provide technical expertise on security concepts, including cloud‑native security tools (e.g., CSPM, CWPP, CASB).
• Investigate and respond to alerts from cloud security platforms (e.g., AWS GuardDuty, Azure Sentinel, GCP Security Command Center).
• Conduct vulnerability assessments across cloud workloads (AWS/Azure/GCP), containers, serverless architectures, and traditional infrastructure.
• Assess cloud security technologies (e.g., SASE, Zero Trust) for enterprise value.
• Implement and enforce security policies in cloud environments (e.g., identity/IAM, data encryption, network security groups).
• Monitor threat intelligence for emerging cloud‑specific vulnerabilities (e.g., misconfigurations, exposed storage buckets).
• Support DevSecOps practices by integrating security into CI/CD pipelines and infrastructure‑as‑code (IaC).

Demonstrable Requirements

• Bachelor’s degree in IT/Cybersecurity or equivalent certifications/experience.
• 3–5 years in security analysis, including 2+ years securing cloud environments (AWS, Azure, or GCP).
• Technical proficiency in:
• Cloud platforms: AWS/Azure/GCP security services (e.g., IAM, KMS, CloudTrail, Security Hub).
• Cloud‑native tools: CSPM (Wiz, Lacework), SIEM (Azure Sentinel, Splunk), container security (Prisma Cloud, Aqua).
• Hybrid/multi‑cloud network security: Firewalls, VPNs, SD‑WAN, Zero Trust Architecture.
• Server/endpoint security: Windows/Linux, Active Directory, cloud workload protection (CrowdStrike, Trend Micro).
• Experience with:
• Cloud vulnerability management (Tenable.io, Qualys, Orca).
• Securing IaC (Terraform, CloudFormation) and CI/CD pipelines (Azure DevOps, GitHub Actions).
• Cloud compliance frameworks (ISO 27017, NIST CSF, CIS Benchmarks).
• Strong threat hunting skills in cloud and hybrid environments.
• Ability to articulate cloud security risks to technical/non‑technical stakeholders.

Desired Qualifications

• Certifications: CCSP, AWS/Azure/GCP Security Specialty, CISSP, CISM, CEH.
• Experience with container security (Kubernetes, Docker) and serverless architectures.
• Proficiency in automation/scripting (Python, PowerShell, CLI) for cloud security tasks.
• Knowledge of cloud data protection (DLP, encryption) and SaaS security (e.g., O365, Salesforce).
• Familiarity with DevSecOps toolchains (e.g., GitLab, Jenkins) and infrastructure‑as‑code scanning.