Cyber Security Analyst

Peoplebank Singapore Pte Ltd; Singapore; On-site; SGD 70,000 - 110,000; Full time

Job summary

Peoplebank Singapore Pte Ltd is seeking a Cyber Security Analyst to safeguard our IT environment by monitoring security events, analyzing SIEM alerts, and guiding incident response. You will work with IT teams to detect vulnerabilities, implement remediation, and help maintain compliance with industry standards while communicating risks to stakeholders.

The role involves incident response, threat detection, vulnerability management, and ongoing security awareness initiatives to strengthen our

Qualifications

• Bachelor's or Advanced Diploma in Computer Science, Information Technology, Cybersecurity or related field.
• Strong knowledge of cybersecurity principles, practices and technologies.
• Expertise in SIEM tools and content management, rule creation, alert tuning and reporting.
• Proficiency with security tools like firewalls, IDPS, antivirus and vulnerability scanners.
• Knowledge of Python/PowerShell for automation within SIEM environments is a plus.

Responsibilities

• Respond to and investigate security incidents, including breaches, malware outbreaks, and phishing attacks.
• Monitor networks and systems for security breaches, alerts, and anomalous activity.
• Conduct root-cause analysis to prevent future incidents and develop incident response procedures.
• Provide analysis and trending of security log data and maintain SIEM dashboards/reports.
• Perform regular vulnerability scans and assist in patch management with IT teams.
• Ensure compliance with regulations (e.g., GDPR, ISO 27001) and company policies.
• Assist in security policy development and staff training on best practices.
• Advise internal/external stakeholders on risk assessment, threat modeling and mitigation.

Skills

Cybersecurity fundamentals

SIEM expertise

Threat modeling

Incident response

Network security

Education

Bachelor's or Advanced Diploma in CS/IT/Cybersecurity

Certs (e.g., CISSP, CEH)

Tools

SIEM tools

Firewalls

IDPS

Vulnerability scanners

Antivirus

Automation tools

Job description

We are seeking a Cyber Security Analyst to play a crucial role in ensuring the accurate and rapid response to security events within our organization. You will be instrumental in analyzing security logs, SIEM alerts, and incident reports to identify and mitigate risks, contributing directly to our robust security posture.

Key Responsibilities:

Incident Response & Investigation:

• Respond to and investigate security incidents, including breaches, malware outbreaks, and phishing attacks.
• Monitor networks and systems for security breaches, alerts, and anomalous activity.
• Conduct root-cause analysis to prevent future incidents and develop comprehensive incident response procedures.

Security Monitoring & Analysis:

• Provide analysis and trending of security log data from various security devices.
• Configure and maintain SIEM tools to align with the organization's security objectives and threat landscape.
• Create custom SIEM dashboards and reports for different stakeholders to visualize critical security metrics and incident data.
• Develop and optimize SIEM content, including rules, alerts, and correlation logic, to improve threat detection and response.
• Regularly review and tune SIEM rules to reduce false positives, enhance event correlation, and maintain relevance to evolving threats.
• Document and update SIEM processes and configurations, ensuring a high level of data accuracy and availability.

Vulnerability Management:

• Perform regular vulnerability scans and assist in patch management processes.
• Work with IT teams to prioritize and remediate identified vulnerabilities.

Risk & Compliance:

• Recommend solutions to mitigate risks in any activity that may potentially impact the security of existing IT and inform management accordingly.
• Ensure compliance with industry regulations (e.g., GDPR, ISO 27001) and company policies.

Security Policy & Awareness:

• Assist in the development, implementation, and maintenance of security policies, standards, and guidelines.
• Assist in training staff on security best practices, including phishing awareness and data protection.
• Help develop educational materials and conduct periodic security awareness training.

Advisory & Assessment:

• Advise and consult internal/external customers on risk assessment, threat modeling, and vulnerability management.
• Perform risk assessments and recommend security measures to mitigate potential risks.

Your Background:

• Bachelor's Degree or Advanced Diploma in Computer Science, Information Technology, Cybersecurity from a recognized university or a related field (or equivalent experience).
• Strong knowledge of cybersecurity principles, practices, and technologies.
• Expertise in SIEM tools and content management, including rule creation, alert tuning, and report customization.
• Proficiency with security tools like firewalls, IDPS, antivirus, and vulnerability scanners.
• Knowledge of ing (Python, PowerShell) for automation within the SIEM environment is a plus.
• Ability to analyze and interpret security data to identify vulnerabilities and potential threats.
• Excellent communication skills, with the ability to explain complex security concepts to non-technical stakeholders.
• Strong analytical skills and attention to detail.
• Experience in the application of threat modeling or other risk identification techniques.
• Detailed knowledge of system security vulnerabilities and remediation techniques, including penetration testing and the development of exploits.
• Breadth of knowledge in the information security space with emphasis on TCP/IP network security, operating system security, common attack patterns, and exploitation techniques.
• Relevant certifications (e.g., CompTIA Security+, Certified Information Systems Security Professional (CISSP), Certified Ethical Hacker (CEH), GIAC Security Essentials (GSEC)) are a plus.
• Effective leadership skills and a team player.
• Strong sense of ownership and drive.
• Ability to work on-call or off-hours as needed to respond to security incidents.
• May require occasional travel for training or workshops.