L1 Security Analyst (AL-FRC250214 007/01)

Xcellink Pte Ltd; Singapore; On-site; SGD 40,000 - 70,000; Full time

Job summary

Xcellink Pte Ltd in Singapore is seeking an L1 Security Analyst to join our security operations team. The role focuses on triage of real-time alerts, incident tickets, and rapid escalation to L2 analysts as needed.

You will work 24/7 on-call shifts, monitor IT/OT security devices, and collaborate with customers to strengthen network defenses. A background in IT infrastructure support and familiarity with TCP/IP, HTTP, DNS, and OWASP Top10 is required.

Qualifications

• Min 1 year in IT Infrastructure Operation or Support.
• Willing to work 24/7 shift including weekends.
• Knowledge of TCP/IP, HTTP, SSL, DNS, OWASP Top10 and web servers.
• Understanding of firewalls, EDR, IDS/IPS, and WAF.
• Bachelor's degree or Diploma in Computer Science/IT/Info Systems.
• Experience with scripting and regular expressions.
• Experience with TCP/IP packet analysis / network debugging.
• Experience with web security concepts and technologies such as WAF, proxy.
• Experience with security technologies, processes, and SOC basics.
• Industry security certifications (GCIA/GCIH, CISSP, CISA, CEH, etc.).
• Experience writing/decoding exploit, vulnerability, and attack detection signatures.
• SOC team experience is a plus.

Responsibilities

• Triage real-time security alerts 24/7 and generate tickets.
• Escalate incidents to L2 analysts as needed.
• Manage problems until closure and ensure SLAs are met.
• Liaise with customers regarding information security incidents.
• Provide remedial actions to enhance customers' network security posture.

Skills

IT Infra Ops

24/7 Shift

TCP/IP

HTTP/SSL/DNS

OWASP Top10

Firewalls

EDR/IDS/IPS

WAF

Scripting

Regex

Education

Bachelor's degree

Poly Diploma

Tools

tcpdump

EDR

Web servers

Job description

Our client is a telecommunications service provider in Singapore. With the expansion of the team, they are looking for a L1 Security Analyst to join the team.

Responsibilities: -

• 24 x 7 triage, short-turn analysis of real-time security alerts & generate tickets, or escalation to L2 Security Analysts that are not in the Automation Runbook.
• 24 x 7 escalation to resolver upon receiving automated generated incident tickets on the health of SOCaS infrastructure, IT/OT managed security devices, or from the website defacement restorer activation alert.
• 24 x 7 manage problems till closure which include:

1. Ensure that Service Level Agreements are met.
2. Liaising with customers with regards to information security incidents
3. Provision and performance of remedial actions to enhance customers' network security posture

Requirements

• Min 1 year working experience in IT Infrastructure Operation and/or Support.
• Willing to work with 24/7 shift pattern that includes weekend work.
• Sound fundamental knowledge on Internet technologies, such as TCP/IP, HTTP, SSL, DNS, OWASP Top10 and web servers (e.g. Apache, IIS, Nginx, etc.).
• Understanding of firewalls, endpoint detection and response (EDR), IDS/IPS, WAF, etc.

Desired qualifications:

• Bachelor's degree / Polytechnic Diploma in Computer Science, Information Technology or Information System.
• Experience in scripting (e.g. shell scripting, Macro, PHP, Perl, Java, etc.) and/or Regular Expression.
• Experience with TCP/IP packet analysis / network debugging with tcp dump or similar.
• Experience with web security concepts and technologies such as web application firewall, proxy.
• Experience general security technologies, processes, and concepts.
• Industry recognized security certifications (GCIA/GCIH, CISSP, CISA, CEH, etc.).
• Experience writing/decoding exploit, vulnerability, and attack detection signatures.
• Experience working with a SOC team is an advantage.

Benefits

• Monthly allowances and end-of-contract bonus