Information Security Analyst - Singapore

Fortinet, Inc.; Singapore; On-site; SGD 60,000 - 110,000; Full time

Job summary

Fortinet, Inc. a cybersecurity pioneer, seeks an Information Security Analyst to monitor security events, identify threats, and work with customers worldwide to improve their security posture.

This highly technical role sits at the intersection of alert triage, detection engineering, and AI-augmented operations within the Fortinet-native stack. You will develop use cases and playbooks for FortiSIEM, FortiAnalyzer, and FortiSOAR, collaborate with AI agents, and help strengthen incident response

Qualifications

• Strong understanding of SOC operations, the Incident Response lifecycle, Cyber Kill Chain, threat vectors, threat intelligence, and cybersecurity frameworks (e.g. MITRE ATT&CK, NIST).
• Hands-on experience with security log analysis (AV, IPS, Anti-Spam), Linux and Windows administration, PostgreSQL, regular expressions, and security visualisation and reporting tools.
• Practical experience with network security technologies including Firewalls, SIEM, EDR, and Sandbox; Fortinet FortiSIEM/FortiAnalyzer/FortiSOAR experience is a plus.
• Aptitude for detection engineering — translate threat scenarios into structured use case logic and operationalise detections across FortiSIEM, FortiAnalyzer, and FortiSOAR.
• Comfortable working with AI agents; critically evaluate AI-generated alert summaries, enrichment, and triage recommendations, and provide structured feedback to improve them.
• Team player with strong communication; cybersecurity certifications are a bonus.

Responsibilities

• Monitor SOC alerts to detect potential threats.
• Use threat intelligence feeds, triage alerts and filter out false-positives.
• Create custom reports, dashboards, and execute log searches to support investigations and customer’s requirements.
• Work with customers and Forensic analysis team to contain and eradicate incidents if need be.
• Follow Incident Response playbooks, processes and procedures and help to improve them.
• Create/Update use case detections to detect new threats from raw logs.
• Create/Update playbooks to automate repetitive triage steps.
• Operationalise detection use cases from FortiSIEM and FortiAnalyzer into FortiSOAR, contributing to the team’s detection engineering pipeline.
• Interact with AI agents during alert triage to review and validate AI-generated alert summaries, enrichment, and contextual analysis.
• Provide structured feedback to AI agents to continuously refine alert summarisation accuracy and triage decision logic based on real-world alert patterns.

Skills

SOC operations

Incident Response

Threat intelligence

MITRE ATT&CK

NIST

Log analysis

Linux admin

Windows admin

PostgreSQL

Regular expressions

Security visualization

Reporting tools

AI collaboration

Communication

Certifications

Tools

FortiSIEM

FortiAnalyzer

FortiSOAR

Firewalls

EDR

Sandbox

SIEM

Job description

Location: Singapore

Join Fortinet, a cybersecurity pioneer with over two decades of excellence, as we continue to shape the future of cybersecurity and redefine the intersection of networking and security. At Fortinet, our mission is to safeguard people, devices, and data everywhere. We are currently seeking a dynamic Information Security Analyst to contribute to the success of our rapidly growing business.

This is a highly technical role, monitoring security events, identifying threats, assessing risks, and working with customers globally to improve their security posture. The role sits at the intersection of alert triage, detection engineering, and AI-augmented operations — the analyst will work within a Fortinet-native stack (FortiSIEM, FortiAnalyzer, FortiSOAR) and actively collaborate with AI agents to drive more accurate and efficient security operations.

FortiCloud SOC-as-a-Service team operates based on a follow the sun approach. Working hours for this position includes 5 days/40 hours per week, consisting of 1 weekend and 4 weekdays (e.g. Sunday – Thursday or Tuesday – Saturday), 8am – 4pm.

As a Information Security Analyst, you will:

• Monitor SOC alerts to detect potential threats
• Use threat intelligence feeds, triage alerts and filter out false-positives
• Create custom reports, dashboards, and execute log searches to support investigations and customer’s requirements
• Work with customers and Forensic analysis team to contain and eradicate incidents if need be
• Follow Incident Response playbooks, processes and procedures and help to improve them
• Create/Update use case detections to detect new threats from raw logs
• Create/Update playbooks to automate repetitive triage steps
• Operationalise detection use cases from FortiSIEM and FortiAnalyzer into FortiSOAR, contributing to the team’s detection engineering pipeline
• Interact with AI agents during alert triage to review and validate AI-generated alert summaries, enrichment, and contextual analysis
• Provide structured feedback to AI agents to continuously refine alert summarisation accuracy and triage decision logic based on real-world alert patterns.

We Are Looking For:

An insightful and influential collaborator to join our team. We encourage you to apply for this position if you have the following qualities:

• Strong understanding of SOC operations, the Incident Response lifecycle, Cyber Kill Chain, threat vectors, threat intelligence, and cybersecurity frameworks (e.g. MITRE ATT&CK, NIST)
• Hands-on experience with security log analysis (AV, IPS, Anti-Spam), Linux and Windows administration, PostgreSQL, regular expressions, and security visualisation and reporting tools
• Practical experience with network security technologies including Firewalls, SIEM, EDR, and Sandbox; hands-on experience with Fortinet products (FortiSIEM, FortiAnalyzer, FortiSOAR) is a strong advantage
• Aptitude for detection engineering — able to translate threat scenarios into structured use case logic and operationalise detections across FortiSIEM, FortiAnalyzer, and FortiSOAR
• Comfortable working alongside AI agents; able to critically evaluate AI-generated alert summaries, enrichment, and triage recommendations, and provide structured feedback to improve them over time
• Team player, self-directed, and disciplined communicator; cybersecurity certifications (GCIA, GCIH, GMON, GSOC, CEH, Security+) are a bonus

Why Join Us:

At Fortinet, we embrace diversity and inclusivity. We encourage applications from diverse backgrounds and identities. Explore our welcoming work environment designed for a rewarding career journey with an attractive Total Rewards package to support you with your overall health and financial well-being. Join us in bringing solutions that make a meaningful and lasting impact to our 660,000+ customers around the globe.

We will only notify shortlisted candidates.

Fortinet will not entertain any unsolicited resumes, please refrain from sending them to any Fortinet employees or Fortinet email aliases. Should any Agency submit any resumes to Fortinet, these resumes if considered, will be assumed to have been given by the Agency free of any related fees/charges.