Cybersecurity SOC Analyst

St Engineering; Singapore; On-site; SGD 48,000 - 72,000; Full time

Job summary

ST Engineering is seeking a Cyber Security Analyst to join the first line of defense against cyber threats. You will monitor logs and alerts, perform initial triage, and document security incidents using a range of security tools.

The role requires attention to detail, effective communication, and teamwork within the SOC. Entry-level candidates are welcome, and you will work on a 24/7 rotating shift, collaborating with SOC tiers and managers to mitigate incidents.

Qualifications

• Basic knowledge of security tools such as SIEMs, IDS/IPS, firewalls, and antivirus systems.
• Strong attention to detail and ability to handle multiple tasks efficiently.
• Effective communication and teamwork skills to interact with internal teams and external stakeholders.
• A collaborative mindset to work effectively with other SOC tiers and managers.
• Strong analytical and problem-solving skills to address complex security challenges.
• Commitment to continuous learning to stay updated with the latest security trends and technologies.
• Adherence to SOC playbooks, standard operating procedures, and compliance requirements.
• Willingness to work on a 24/7 rotating shift schedule.
• Entry-level candidates are welcome to apply.

Responsibilities

• Perform proactive monitoring of logs, data, link utilization and system availability across multiple tools.
• Detect and identify potential security incidents using pre-defined rules and correlation.
• Investigate and triage alerts to determine severity and impact of security events.
• Document detailed assessments and actions taken in incident tickets.
• Escalate incidents requiring further investigation to Senior Security Analyst.
• Prepare standardized escalation emails for efficient communication.
• Collaborate with SOC Leads/Managers to mitigate and resolve incidents.
• Contribute to feedback sessions and process improvement reviews to enhance workflows.

Skills

Attention to detail

Multitasking

Communication

Teamwork

Analytical thinking

Problem solving

Continuous learning

SOC playbooks

Tools

SIEMs

IDS/IPS

Firewalls

Antivirus

Job description

• The Cyber Security Analyst plays a critical role in the first line of defense against cybersecurity threats. The role involves proactive monitoring, initial triage, and documentation of security incidents. Analysts will utilize various security tools and systems to detect, analyze, and documentation of security incidents.

Responsibilities

Incident Monitoring and Detection

• Perform proactive monitoring of logs, data, link utilization, and system availability across multiple SIEMs or security tools.Detect and identify potential security incidents using pre-defined rules and correlation.Conduct blacklist scanning, keyword ingestion, and fine-tuning of SIEM rules for improved accuracy.
• Investigate and triage alerts to determine the severity and impact of security events.Document detailed assessments and actions taken into incident tickets.Escalate incidents that require further investigation or resolution to Senior Security Analyst.Use standardized templates as a base but proactively amend escalation emails based on current investigations and analysis without referring to past emails.
• Handle customer phone calls and respond to escalation emails.Prepare standardized escalation email templates for efficient communication.
• Work closely with SOC Leads, and SOC Managers to ensure incidents are effectively mitigated and resolved.Participate in feedback sessions and process improvement reviews to enhance workflows.
• Customer Interaction
• Collaboration and Process Improvement

Requirements

• Basic knowledge of security tools such as SIEMs, IDS/IPS, firewalls, and antivirus systems.
• Strong attention to detail and ability to handle multiple tasks efficiently.
• Effective communication and teamwork skills to interact with internal teams and external stakeholders.
• A collaborative mindset to work effectively with other SOC tiers and managers.
• Strong analytical and problem-solving skills to address complex security challenges.
• Commitment to continuous learning to stay updated with the latest security trends and technologies.
• Adherence to SOC playbooks, standard operating procedures, and compliance requirements.
• Willingness to work on a 24/7 rotating shift schedule.
• Entry-level candidates are welcome to apply.