L1 Security Analyst - CT-FNC240930 027/01

Xcellink Pte Ltd; Singapore; On-site; SGD 60,000 - 80,000; Full time

Job summary

A leading telecommunications service provider in Singapore is looking for an L1 Security Analyst to manage security alerts, generate tickets, and ensure service level agreements are met. Candidates should have a Bachelor’s degree in IT, scripting skills, and a strong knowledge of Internet technologies. The position requires a willingness to work 24/7 shifts and offers monthly allowances and bonuses.

Benefits

Monthly allowances

End-of-contract bonus

Qualifications

• Min 1 year working experience in IT Infrastructure Operation.
• Willing to work 24/7 shift including weekends.
• Industry recognized security certifications (GCIA/GCIH, CISSP, etc.) are a plus.

Responsibilities

• Manage security alerts and generate tickets.
• Liaise with customers for information security incidents.
• Ensure service level agreements are met during problem resolution.

Skills

24/7 triage and analysis of security alerts

Knowledge of Internet technologies (TCP/IP, HTTP, SSL, DNS)

Understanding of firewalls and endpoint detection

Scripting skills (shell scripting, PHP, Perl)

Experience in TCP/IP packet analysis

Education

Bachelor’s degree in Computer Science or related field

Polytechnic Diploma in Information Technology

Job description

Our Client is a telecommunications service provider in Singapore. With the expansion of the team, they are looking for a L1 Security Analystto join the team.

Responsibilities:

• 24 x 7 triage, short-turn analysis of real-time security alerts & generate tickets, or escalation to L2 Security Analysts that are not in the Automation Runbook.
• 24 x 7 escalation to resolver upon receiving automated generated incident tickets on the health of SOCaS infrastructure, IT/OT managed security devices, or from the website defacement restorer activation alert.
• 24 x 7 manage problems till closure which include:
  • Ensure that Service Level Agreements are met.
  • Liaising with customers with regards to information security incidents.
  • Provision and performance of remedial actions to enhance customers' network security posture.
• Min 1 year working experience in IT Infrastructure Operation and/or Support.
• Willing to work with 24/7 shift pattern that includes weekend work.
• Sound fundamental knowledge on Internet technologies, such as TCP/IP, HTTP, SSL, DNS, OWASP Top10 and web servers (e.g. Apache, IIS, Nginx, etc.).
• Understanding of firewalls, endpoint detection and response (EDR), IDS/IPS, WAF, etc.

Desired qualifications:

• Bachelor’s degree / Polytechnic Diploma in Computer Science, Information Technology or Information System.
• Experience in scripting (e.g. shell scripting, Macro, PHP, Perl, Java, etc.) and/or Regular Expression.
• Experience with TCP/IP packet analysis / network debugging with tcp dump or similar.
• Experience with web security concepts and technologies such as web application firewall, proxy.
• Experience general security technologies, processes, and concepts.
• Industry recognized security certifications (GCIA/GCIH, CISSP, CISA, CEH, etc.).
• Experience writing/decoding exploit, vulnerability, and attack detection signatures.
• Experience working with a SOC team is an advantage.
• Monthly allowances and end-of-contract bonus