Cyber Security Analyst

MSI GLOBAL PRIVATE LIMITED; Singapore; On-site; SGD 70,000 - 90,000; Full time

Job summary

A cyber security firm in Singapore is looking for a Cyber Security Analyst to secure on-premises, cloud, and hybrid environments. The role involves monitoring for cyber-attacks, conducting vulnerability assessments, and implementing security policies. Candidates should have 3-5 years of experience, technical proficiency in AWS/Azure/GCP security services, and strong threat hunting abilities. This position offers opportunities for growth in a critical field with a focus on cloud security technology.

Qualifications

• 3–5 years in security analysis with 2+ years in cloud security (AWS, Azure, or GCP).
• Experience in cloud-native tools and hybrid/multi-cloud network security.
• Strong skills in threat hunting within cloud and hybrid environments.

Responsibilities

• Monitor cloud and hybrid environments to detect cyber-attacks.
• Provide expertise in security tools and implementation of policies.
• Conduct vulnerability assessments across various infrastructures.

Skills

Cloud security analysis

Vulnerability management

Threat hunting

DevSecOps integration

Network security

Education

Bachelor’s degree in IT/Cybersecurity or equivalent certifications

Tools

AWS GuardDuty

Azure Sentinel

GCP Security Command Center

CSPM tools (Wiz, Lacework)

SIEM (Splunk, Azure Sentinel)

Cloud security tools (Tenable.io, Qualys)

Job description

The Cyber Security Analyst (CSA) is responsible for securing the organization’s on-premises, cloud, and hybrid environments. Reporting to the Information Security Manager, the CSA provides technical expertise in network, system, application, and cloud security. The CSA collaborates cross‑functionally to ensure systems are designed, deployed, and managed with robust security controls. This role leads vulnerability management, conducts cloud security assessments, manages penetration tests, researches emerging threats (including cloud‑specific risks), and analyses security events to proactively mitigate attacks.

Key Responsibilities

• Proactively monitor cloud (IaaS/PaaS/SaaS), on‑premises, and hybrid environments to detect and mitigate cyber‑attacks.
• Provide technical expertise on security concepts, including cloud‑native security tools (e.g., CSPM, CWPP, CASB).
• Investigate and respond to alerts from cloud security platforms (e.g., AWS GuardDuty, Azure Sentinel, GCP Security Command Center).
• Conduct vulnerability assessments across cloud workloads (AWS/Azure/GCP), containers, serverless architectures, and traditional infrastructure.
• Assess cloud security technologies (e.g., SASE, Zero Trust) for enterprise value.
• Implement and enforce security policies in cloud environments (e.g., identity/IAM, data encryption, network security groups).
• Monitor threat intelligence for emerging cloud‑specific vulnerabilities (e.g., misconfigurations, exposed storage buckets).
• Support DevSecOps practices by integrating security into CI/CD pipelines and infrastructure‑as‑code (IaC).

Demonstrable Requirements

• Bachelor’s degree in IT/Cybersecurity or equivalent certifications/experience.
• 3–5 years in security analysis, including 2+ years securing cloud environments (AWS, Azure, or GCP).
• Technical proficiency in:
• Cloud platforms: AWS/Azure/GCP security services (e.g., IAM, KMS, CloudTrail, Security Hub).
• Cloud‑native tools: CSPM (Wiz, Lacework), SIEM (Azure Sentinel, Splunk), container security (Prisma Cloud, Aqua).
• Hybrid/multi‑cloud network security: Firewalls, VPNs, SD‑WAN, Zero Trust Architecture.
• Server/endpoint security: Windows/Linux, Active Directory, cloud workload protection (CrowdStrike, Trend Micro).
• Experience with:
• Cloud vulnerability management (Tenable.io, Qualys, Orca).
• Securing IaC (Terraform, CloudFormation) and CI/CD pipelines (Azure DevOps, GitHub Actions).
• Cloud compliance frameworks (ISO 27017, NIST CSF, CIS Benchmarks).
• Strong threat hunting skills in cloud and hybrid environments.
• Ability to articulate cloud security risks to technical/non‑technical stakeholders.

Desired Qualifications

• Certifications: CCSP, AWS/Azure/GCP Security Specialty, CISSP, CISM, CEH.
• Experience with container security (Kubernetes, Docker) and serverless architectures.
• Proficiency in automation/scripting (Python, PowerShell, CLI) for cloud security tasks.
• Knowledge of cloud data protection (DLP, encryption) and SaaS security (e.g., O365, Salesforce).
• Familiarity with DevSecOps toolchains (e.g., GitLab, Jenkins) and infrastructure‑as‑code scanning.