L1 CYBER SECURITY SOC ANALYST (24/7 SHIFT ROTATION)

AKERA TECHNOLOGIES PTE. LTD.; Singapore; On-site; SGD 42,000 - 70,000; Full time

Job summary

AKERA TECHNOLOGIES PTE. LTD. is seeking an L1 SOC Analyst to join a 24/7 cybersecurity team.

You will perform real-time monitoring, threat detection, and initial incident response using SIEM/XDR platforms, with 12-hour rotational shifts. The role requires foundational knowledge of networks, logs, and attack vectors to defend digital assets and escalate complex incidents. You will monitor SIEM/XDR tools, analyze logs from multiple security tools, and escalate incidents to senior analysts.

Qualifications

• Diploma/Bachelor’s in cybersecurity, IT, CS or related field.
• 1.1+ year in security monitoring or 2+ years in IT support/networking with security exposure.
• Hands-on: SIEM/XDR platforms (Splunk, Azure Sentinel).
• Understanding of networking and cloud security fundamentals.

Responsibilities

• Monitor SIEM/XDR tools for security alerts across networks, endpoints and cloud.
• Analyze logs from firewalls, IDS/IPS, EDR to identify malicious activity.
• Perform initial incident triage and escalate to L2/L3 with documentation.
• Apply threat intel (MITRE ATT&CK) to contextualize alerts.
• Document incidents with timelines and evidence; generate shift reports.
• Tune SIEM rules to reduce false positives and validate configurations.

Skills

Security monitoring

IT security exposure

SIEM/XDR platforms

Security tools

OS security

Networking fundamentals

Cloud security basics

Education

Diploma/Bachelor’s in Cybersecurity/IT/CS

Tools

Splunk

Azure Sentinel

EDR

Firewalls

IDS/IPS

Email security

Job description

Job Overview

We seek a vigilant L1 Security Operations Center (SOC) Analyst to join our 24/7cybersecurity team. Operating on 12-hour rotational shifts, you will perform real-time monitoring, threat detection, and initial incident response using SIEM/XDR platforms. The role requires foundational knowledge of network security, log analysis, and attack vectors to defend against threats while escalating complex incidents to senior analysts. This position is critical formaintaining our security posture across global digital assets.

Duties and Responsibilities

Continuous Monitoring & Detection:

1. Monitor SIEM/XDR tools (e.g., Splunk, Sentinel, QRadar) for security alerts across networks, endpoints, and cloud environments.
2. Analyze logs from firewalls, IDS/IPS, EDR, and other security tools to identify malicious activity.

Incident Triage & Response:

1. Perform initial investigation and classification of security events (malware, phishing,DDoS).
2. Execute predefined playbooks for containment (e.g., isolate hosts, block IPs).
3. Escalate confirmed incidents to L2/L3 analysts with detailed documentation.

Threat Intelligence Utilization:

1. Apply threat intelligence feeds (e.g., MITRE ATT&CK) to contextualize alerts.
2. Monitor dark web/IoC sources for emerging threats relevant to the organization.

Reporting & Documentation:

1. Document incidents in ticketing systems (e.g., Jira, ServiceNow) with timelines, actions taken, and evidence.
2. Generate daily shift reports highlighting threat trends, false positives, and systemhealth.

Tool Maintenance & Optimization:

1. Tune SIEM rules to reduce false positives and improve detection accuracy.
2. Validate security tool configurations (e.g., firewall policies, EDR rules).

Requirements

Education:

1. Diploma/Bachelor’s in Cybersecurity, IT, Computer Science, or related field.

Experience & Skills:

1.1+year in security monitoring or 2+ years in IT support/networking with securityexposure.

Hands-on experience with:

• SIEM/XDRplatforms (Splunk, Azure Sentinel, etc.)
• Securitytools (EDR, firewalls, IDS/IPS, email security)
• OSsecurity (Windows/Linux log analysis)

Understandingof:

• Networking(TCP/IP, DNS, VPN, HTTP/S)
• Common attack vectors (phishing, malware, brute force)
• Cloud security fundamentals (AWS/Azure/GCP)

TechnicalCertifications (Preferred):

• CompTIASecurity+, CySA+, CEH, or equivalent entry-level security certs
• Vendorcertifications (e.g., Splunk Core User, Microsoft SC-200)

ShiftRequirements:

1. Willingnessto work 12-hour rotational shifts (day/night), including weekends/publicholidays.
2. Ability to maintain focus during high-pressure overnight shifts.

SoftSkills:

• Strong analytical thinking and attention to detail.
• Effective communication for cross-team escalation.
• Adaptability in fast-paced threat environments.
• Basic knowledge of ITIL/incident management processes.