Cyber Security Analyst

MSI Global Pte Ltd; Singapore; On-site; SGD 80,000 - 100,000; Full time

Job summary

A cybersecurity firm in Singapore is seeking a Cyber Security Analyst to enhance the security of on-premises, cloud, and hybrid environments. The role involves monitoring for threats, conducting assessments, and collaborating across teams to implement robust security measures. Ideal candidates will have 3-5 years of security analysis experience, particularly in cloud environments. Certifications like CCSP or CISSP are preferred. This position offers a unique opportunity to lead in a dynamic environment while addressing emerging security challenges.

Qualifications

• 3–5 years of experience in security analysis, including 2+ years in cloud security.
• Experience with cloud compliance frameworks like ISO 27017.
• Strong proficiency in securing IaC and CI/CD pipelines.

Responsibilities

• Proactively monitor and mitigate cyber-attacks across environments.
• Conduct vulnerability assessments and respond to security alerts.
• Support DevSecOps practices and implement security policies.

Skills

Cloud security expertise

Threat hunting

Incident response

Vulnerability assessment

Network security

Technical communications

Education

Bachelor’s degree in IT/Cybersecurity

Tools

AWS security services

Azure Sentinel

Vulnerability management tools

CSPM tools (Wiz, Lacework)

SIEM (Splunk)

Job description

The Cyber Security Analyst (CSA) is responsible for securing the organization’s on-premises, cloud, and hybrid environments. Reporting to the Information Security Manager, the CSA provides technical expertise in network, system, application, and cloud security. The CSA collaborates cross‑functionally to ensure systems are designed, deployed, and managed with robust security controls. This role leads vulnerability management, conducts cloud security assessments, manages penetration tests, researches emerging threats (including cloud‑specific risks), and analyses security events to proactively mitigate attacks.

Key Responsibilities

• Proactively monitor cloud (IaaS/PaaS/SaaS), on‑premises, and hybrid environments to detect and mitigate cyber‑attacks.
• Provide technical expertise on security concepts, including cloud‑native security tools (e.g., CSPM, CWPP, CASB).
• Investigate and respond to alerts from cloud security platforms (e.g., AWS GuardDuty, Azure Sentinel, GCP Security Command Center).
• Conduct vulnerability assessments across cloud workloads (AWS/Azure/GCP), containers, serverless architectures, and traditional infrastructure.
• Assess cloud security technologies (e.g., SASE, Zero Trust) for enterprise value.
• Implement and enforce security policies in cloud environments (e.g., identity/IAM, data encryption, network security groups).
• Monitor threat intelligence for emerging cloud‑specific vulnerabilities (e.g., misconfigurations, exposed storage buckets).
• Support DevSecOps practices by integrating security into CI/CD pipelines and infrastructure‑as‑code (IaC).

Demonstrable Requirements

• Bachelor’s degree in IT/Cybersecurity or equivalent certifications/experience.
• 3–5 years in security analysis, including 2+ years securing cloud environments (AWS, Azure, or GCP).
• Technical proficiency in:
• Cloud platforms: AWS/Azure/GCP security services (e.g., IAM, KMS, CloudTrail, Security Hub).
• Cloud‑native tools: CSPM (Wiz, Lacework), SIEM (Azure Sentinel, Splunk), container security (Prisma Cloud, Aqua).
• Hybrid/multi‑cloud network security: Firewalls, VPNs, SD‑WAN, Zero Trust Architecture.
• Server/endpoint security: Windows/Linux, Active Directory, cloud workload protection (CrowdStrike, Trend Micro).
• Experience with:
• Cloud vulnerability management (Tenable.io, Qualys, Orca).
• Securing IaC (Terraform, CloudFormation) and CI/CD pipelines (Azure DevOps, GitHub Actions).
• Cloud compliance frameworks (ISO 27017, NIST CSF, CIS Benchmarks).
• Strong threat hunting skills in cloud and hybrid environments.
• Ability to articulate cloud security risks to technical/non‑technical stakeholders.

Desired Qualifications

• Certifications: CCSP, AWS/Azure/GCP Security Specialty, CISSP, CISM, CEH.
• Experience with container security (Kubernetes, Docker) and serverless architectures.
• Proficiency in automation/scripting (Python, PowerShell, CLI) for cloud security tasks.
• Knowledge of cloud data protection (DLP, encryption) and SaaS security (e.g., O365, Salesforce).
• Familiarity with DevSecOps toolchains (e.g., GitLab, Jenkins) and infrastructure‑as‑code scanning.