Security Analyst

TOSS-EX PR PTE. LTD.; Singapore; On-site; SGD 75,000 - 90,000; Full time

Job summary

TOSS-EX PR PTE. LTD. is seeking a Security Analyst to join our security operations and incident response team in Singapore.

You will monitor alerts, investigate incidents, and coordinate containment and recovery activities, translating threats into actionable controls. The role requires hands-on experience with security tools (SIEM/SOAR, EDR/XDR, DLP/CASB) and a solid understanding of ISO 27001, NIST, SOC 2, and PDPA/GDPR standards.

Qualifications

• Degree in Computer Science/Information Technology or equivalent.
• At least 3 years’ IT experience.
• Basic technical knowledge in IT network infrastructure, server platforms (Unix, Windows) and desktops.
• Experience in using security tools (E.g. Security Endpoint solutions, CyberArk, Tenable Nessus, Securonix, Sentinel) and certifications such as CISSP or Security+.

Responsibilities

• Monitor and investigate security alerts (SOC).
• Lead or support incident response for malware/ransomware, phishing and account compromise, insider threats, data leakage incidents.
• Coordinate containment, eradication, and recovery activities.
• Perform vulnerability scanning and risk assessment; prioritize remediation.
• Own day-to-day operation of security platforms such as SIEM/SOAR, EDR/XDR, email and web security, DLP/CASB.
• Tune detections and reduce false positives; integrate tools with enterprise systems.
• Track emerging threats and translate threat intelligence into actionable controls.
• Support governance, risk, and compliance activities and maintain security documentation.
• Provide security guidance to IT, developers, and business users; run phishing simulations.
• Drive automation and efficiency improvements; measure and report security KPIs and risk metrics.

Skills

Security operations

Incident response

Threat intelligence

Governance, risk & compliance

Education

Degree in CS/IT

Tools

CyberArk

Tenable Nessus

Securonix

Sentinel

Security endpoint solutions

Job description

Security Analyst is primarily responsible for security operation and incident response. The incumbent will be creating, tuning, compiling metrics of all security devices, along with documentation of processes and procedures. This role will require strong analytical and collaboration skills, detailed working knowledge of current and emerging security technologies, as well as the ability to correlate events to identify abnormal behaviour.

1. Security Operations & Incident Response

• Monitor and investigate security alerts (directly or via SOC)
• Lead or support incident response for:
  • Malware / ransomware
  • Phishing and account compromise
  • Insider threats
  • Data leakage incidents
• Coordinate containment, eradication, and recovery activities
• Conduct post-incident root cause analysis and improvement actions

2. Vulnerability & Patch Management

• Perform vulnerability scanning and risk assessment
• Analyse scan results and prioritize remediation based on business risk
• Coordinate patching with IT and application teams
• Track remediation progress and report risk exposure

3. Security Tool Ownership

• Own day-to-day operation of security platforms such as:
  • SIEM / SOAR
  • EDR / XDR
  • Email and web security
  • DLP, CASB
• Tune detections, improve signal quality, and reduce false positives
• Integrate security tools with enterprise systems
• Advantage if verse in tools like Sentinel / Securonix

4. Threat Management & Intelligence

• Track emerging threats, vulnerabilities, and attack trends
• Assess relevance and impact to the organization
• Translate threat intelligence into actionable controls and detections

5. Governance, Risk & Compliance Support

• Support compliance with standards and regulations:
  • ISO 27001, NIST, SOC 2, PDPA, GDPR
• Participate in internal risk assessments and audits
• Maintain security documentation, policies, and procedures
• Support third-party risk assessments and vendor reviews

6. User Awareness & Advisory

• Provide security guidance to IT, developers, and business users
• Support security awareness programs and phishing simulations
• Act as internal security SME and trusted advisor

7. Continuous Improvement

• Identify gaps and recommend security enhancements
• Drive automation and efficiency improvements
• Measure and report security KPIs and risk metrics

Requirements

• Degree in Computer Science/Information Technology or equivalent
• At least 3 years’ experience in IT
• Basic technical knowledge in IT network infrastructure, server platforms (Unix, Windows platform) and desktops(OS X and Windows XP and above)
• Experience in using security tools (E.g. Security Endpoint solutions, CyberArk, Tenable Nessus, Securonix, Sentinel))
• Certified with one or more of the following: QISP, CISSP, Cybersecurity Nexus, CompTIA Security+