Lead SOC Analyst – Cyber Defense & Incident Response

State Street Corporation; Singapore; On-site; SGD 100,000 - 180,000; Full time

Job summary

State Street Corporation seeks a Lead Cyber Security Operations Center (SOC) analyst to join a 24/7 Fusion Center in Singapore. You will guide incident response, triage, containment and remediation of high-severity cyber events, and produce postmortems to drive improvements.

Required are 4+ years in cyber security SOC/IR roles, strong malware analysis, memory forensics, and experience with SIEM/EDR/defense tools. Financial services exposure is a plus, on-site role.

Qualifications

• Experience investigating & managing major/complex cyber incidents end to end.

Responsibilities

• Lead the cyber incident response process to ensure timely triage, analysis, containment, eradication and return to service for high severity or long running incidents.
• Author incident status updates and closure reports to leadership.
• Produce postmortem reports to identify lessons learned and recommendations.
• Continuously update incident response plans, playbooks and procedures.
• Manage and participate in cyber exercises such as tabletops and cyber ranges.
• Measure effectiveness of incident response via KRI and KPI metrics.
• Identify ways to enhance the incident response process.
• Collaborate with the SOC to drive development and collaboration.
• Train and mentor SOC personnel.
• Foster knowledge sharing across the Fusion Center and follow the sun model.

Skills

Major incidents handling

SOC leadership

OS administration

Malware analysis

Memory forensics

TTPs & MITRE ATT&CK

IT architecture & cloud

Security tech stack (SIEM, EDR, AV)

Education

Master's in Cyber Security / IT

Certifications (CISSP/CEH/OSCP/GCIH)

Tools

Python

PowerShell

SQL

Job description

State Street Corporation seeks a Lead Cyber Security Operations Center (SOC) analyst to join a 24/7 Fusion Center in Singapore. You will guide incident response, triage, containment and remediation of high-severity cyber events, and produce postmortems to drive improvements.

Required are 4+ years in cyber security SOC/IR roles, strong malware analysis, memory forensics, and experience with SIEM/EDR/defense tools. Financial services exposure is a plus, on-site role.