Cyber Threat Analyst

OVERSEA-CHINESE BANKING CORPORATION LIMITED; Singapore; On-site; SGD 60,000 - 100,000; Full time

Job summary

OCBC is seeking a Cyber Engineering - Risk professional to monitor and analyze cyber threats within a 24x7 cyber security operations centre, located in the East of Singapore. You will work with engineering teams to identify and mitigate risks, while upholding cyber defence standards and procedures.

The role involves real-time event monitoring, containment, and incident reporting. Ideal candidates have a degree in cyber security or related field, hands-on experience with SIEM and IDS/IPS tools,

Qualifications

• Degree or Diploma in cyber security or related field.
• Experience with SIEM, IDS/IPS, and log analysis.
• Familiarity with vulnerability assessment and incident response processes.

Responsibilities

• Perform monitoring, analysis and escalation of real-time security events.
• Provide timely detection, identification and containment of cyber threats.
• Log security events and manage until closure while ensuring SLAs are met.
• Support reporting and documentation of cyber security incidents.

Skills

Cybersecurity degree

SIEM

IDS

Network tools

Incident response

Vulnerability assessment

Threat hunting

Communication

Regulations

Malware analysis

Education

Degree or Diploma in Cyber Security

Tools

SIEM Tools

IDS/IPS Tools

Job description

Why Join

Protecting our customers' assets and data is at the heart of everything we do at OCBC. As a Cyber Engineering - Risk professional, you'll play a critical role in safeguarding our systems and networks from cyber threats. You'll be part of a team that's shaping the future of cybersecurity in the financial industry.

How you succeed

To succeed in this role, you'll need to stay one step ahead of emerging threats. You'll work closely with our engineering teams to identify and mitigate risks and develop strategies to protect our systems and data. You'll need to be proactive, collaborative, and always looking for ways to improve our cybersecurity posture.

What you do

Candidates will be trained and subsequently perform monitoring and analysis of cyber threats that occur within the organisation. Candidates will be working normal office hours in a 24x7 cyber security operations centre (located in the East).

Main Responsibility

• Perform monitoring, analysis/investigation and escalation of real-time security events.
• Provide timely detection, identification and containment of possible cyber-attacks/intrusions.
• Determine the effectiveness and impact assessment of an observed attack.
• Log security events and manage till closure
• Ensure that Service Level Agreements are met
• Additional responsibilities will include reporting, documenting cyber security events, as well as supporting the team in cyber security related matters.

Who you are

• Degree or Diploma related to the field of cyber security.
• Knowledge of common network tools (e.g., ping, traceroute, ns lookup)
• Knowledge of cyber defence policies, procedures, and regulations
• Knowledge of different types of network communication (e.g., Local Area Network [LAN], Wide Area Network [WAN], Metropolitan Area Network [MAN], Wireless Wide Area Network [WWAN], Wireless Local Area Network [WLAN])
• Knowledge of SIEM, Intrusion Detection System(IDS) tools and applications
• Knowledge of different classes of attacks (e.g.,passive, active, insider, close-in, distribution)
• Knowledge of vulnerability assessment tools, including open source tools, and their capabilities
• Knowledge of incident response and handling methodologies
• Knowledge of general attack stages (e.g.,footprinting and scanning, enumeration, gaining access, escalation of privileges, maintaining access, network exploitation, covering tracks)
• Knowledge of the cyber defence service provider reporting structure and processes within one’s own organization
• Knowledge of system and application security threats and vulnerabilities (e.g., buffer overflow, mobile code, cross-site scripting, Procedural and injections, race conditions, covert channel, replay, return-oriented attacks, malicious code) Language/Structured Query Language[PL/SQL]

Who we are

As Singapore's longest established bank, we have been dedicated to enabling individuals and businesses to achieve their aspirations since 1932. How? By taking the time to truly understand people. From there, we provide support, services, solutions, and career paths that meet their individual needs and desires.

Today, we're on a journey of transformation. Leveraging technology and creativity to become a future-ready learning organisation.

But for all that change, our strategic ambition is consistently clear and bold, which is to be Asia's leading financial services partner for a sustainable future.

We invite you to build the bank of the future. Innovate the way we deliver financial services. Work in friendly, supportive teams. Build lasting value in your community. Help people grow their assets, business, and investments. Take your learning as far as you can. Or simply enjoy a vibrant, future-ready career. Your Opportunity Starts Here.