L2 SOC Threat Hunter & Incident Response Analyst

Beyondsoft Singapore; Singapore; On-site; SGD 90,000 - 140,000; Full time

Job summary

Beyondsoft Singapore is seeking a capable SOC Analyst (L2) to perform triage, investigate security alerts across SIEM, EDR/XDR, cloud, and identity platforms.

You will correlate events, hunt threats using MITRE ATT&CK, coordinate containment and remediation with IT teams, and document findings for stakeholders.

Must have a degree in cybersecurity or IT and 4+ years in SOC/IR; strong communication and cloud familiarity with AWS/Azure/GCP preferred.

Qualifications

• Degree or Diploma in Cybersecurity, IT, or related field.
• 4+ years of experience in SOC operations or incident response (L2 preferred).
• Experience with SIEM, EDR/XDR, and cloud or identity security tools.
• Strong understanding of attack chains, MITRE ATT&CK, and threat analysis.
• Hands-on experience in incident investigation or threat hunting.
• Familiar with AWS, Azure, and GCP.
• Knowledge of networking concepts (TCP/IP, DNS, HTTP).
• Analytical and problem-solving skills; good communication for cross-functional work.
• Certs such as CompTIA Security+, CEH, or GCIH are a plus.
• Ability to operate independently in a SOC environment.

Responsibilities

• Perform L2 triage and investigation of security alerts across SIEM, EDR/XDR, email, identity, network, and cloud platforms.
• Correlate events to identify root cause, scope, and impact of security incidents.
• Investigate phishing, malware, account compromise, and unauthorised access cases.
• Conduct proactive threat hunting using threat intelligence and MITRE ATT&CK framework.
• Support containment, remediation, and recovery activities during incidents.
• Document investigation findings and prepare incident reports for stakeholders.
• Escalate complex or high severity incidents to L3 or relevant teams with clear handover notes.
• Monitor security dashboards and respond to alerts within defined SLAs.
• Assist in vulnerability assessment and coordinate patching with relevant teams.
• Contribute to SOC improvements (playbooks, detection tuning, onboarding of new tools).
• Stay updated on emerging threats, attack techniques, and security trends.
• Work closely with IT, infrastructure, and other teams during incident response.

Skills

MITRE ATT&CK

Threat analysis

Incident investigation

Threat hunting

Networking concepts

Analytical thinking

Problem solving

Communication

Independent work

Education

Degree or Diploma in Cybersecurity, IT, or related field

Tools

SIEM

EDR/XDR

AWS

Azure

GCP

Cloud security tools

Job description

Beyondsoft Singapore is seeking a capable SOC Analyst (L2) to perform triage, investigate security alerts across SIEM, EDR/XDR, cloud, and identity platforms.

You will correlate events, hunt threats using MITRE ATT&CK, coordinate containment and remediation with IT teams, and document findings for stakeholders.

Must have a degree in cybersecurity or IT and 4+ years in SOC/IR; strong communication and cloud familiarity with AWS/Azure/GCP preferred.