L1 Security Analyst (AL-FRC250214 007/01)

Xcellink Pte Ltd; Singapore; On-site; SGD 40,000 - 60,000; Full time

Job summary

A telecommunications service provider in Singapore is seeking an experienced L1 Security Analyst to join their team. This role involves managing real-time security alerts, liaising with customers on incidents, and ensuring the security of network infrastructure. Candidates should possess a relevant degree and a foundational understanding of internet technologies and security processes. The position requires a commitment to a 24/7 shift pattern, including weekends, offering competitive monthly allowances and an end-of-contract bonus.

Benefits

Monthly allowances

End-of-contract bonus

Qualifications

• Minimum 1 year working experience in IT Infrastructure Operation or Support.
• Willingness to work in a 24/7 shift pattern, including weekends.
• Experience with TCP/IP packet analysis and network debugging.

Responsibilities

• Manage 24/7 analysis of security alerts and generate tickets.
• Liaise with customers regarding security incidents.
• Perform remedial actions to enhance network security.

Skills

Knowledge of Internet technologies (TCP/IP, HTTP, SSL, DNS)

Understanding of firewalls and EDR

Scripting skills (shell, PHP, Perl, etc.)

Experience with security technologies

Education

Bachelor’s degree or Polytechnic Diploma in Computer Science, IT or Information System

Job description

L1 Security Analyst

Our client is a telecommunications service provider in Singapore. With the expansion of the team, they are looking for a L1 Security Analyst to join the team.

Responsibilities

• 24 x 7 triage, short-turn analysis of real-time security alerts & generate tickets, or escalation to L2 Security Analysts that are not in the Automation Runbook.
• 24 x 7 escalation to resolver upon receiving automated generated incident tickets on the health of SOCaS infrastructure, IT/OT managed security devices, or from the website defacement restorer activation alert.
• 24 x 7 manage problems till closure which include:

1. Ensure that Service Level Agreements are met.
2. Liaising with customers with regards to information security incidents
3. Provision and performance of remedial actions to enhance customers' network security posture

• Min 1 year working experience in IT Infrastructure Operation and/or Support.
• Willing to work with 24/7 shift pattern that includes weekend work.
• Sound fundamental knowledge on Internet technologies, such as TCP/IP, HTTP, SSL, DNS, OWASP Top10 and web servers (e.g. Apache, IIS, Nginx, etc.).
• Understanding of firewalls, endpoint detection and response (EDR), IDS/IPS, WAF, etc.

Desired qualifications

• Bachelor’s degree / Polytechnic Diploma in Computer Science, Information Technology or Information System.
• Experience in scripting (e.g. shell scripting, Macro, PHP, Perl, Java, etc.) and/or Regular Expression.
• Experience with TCP/IP packet analysis / network debugging with tcp dump or similar.
• Experience with web security concepts and technologies such as web application firewall, proxy.
• Experience general security technologies, processes, and concepts.
• Industry recognized security certifications (GCIA/GCIH, CISSP, CISA, CEH, etc.).
• Experience writing/decoding exploit, vulnerability, and attack detection signatures.
• Experience working with a SOC team is an advantage.

Benefits

• Monthly allowances and end-of-contract bonus