Security Infrastructure Engineer #IDO
RECRUIT EXPRESS PTE LTD
Get more replies from employers
Send a job-specific resume in minutes.
Job summary
RECRUIT EXPRESS PTE LTD is seeking a capable 1st-level security analyst to monitor Entra ID, MFA, Exchange Online Protection, and endpoint security. You will perform initial triage, investigate alerts, and escalate confirmed threats to L2 engineers, while maintaining daily security monitoring reports and ensuring SLA compliance.
You will work with Azure Monitor, Log Analytics, Trend Micro, CyberArk, and PKI basics to identify anomalies, review spam/phishing alerts, and participate in handovers.
Qualifications
- Experience monitoring Entra ID and authentication events.
- Familiarity with MFA and conditional access
- Experience monitoring Exchange Online Protection and endpoint security tools
Responsibilities
- Monitor Entra ID sign-in logs and authentication alerts
- Perform first-level triage of suspicious login attempts
- Monitor MFA failures and abnormal sign-in patterns
- Review Exchange Online Protection spam/phishing alerts
- Monitor Trend Micro endpoint alerts
- Monitor CyberArk EPM & PAM
- Monitor Azure security dashboards and alert queues
- Create and update security incident tickets
- Perform initial investigation using runbooks
- Escalate confirmed threats to L2 Security Engineer
- Track certificate expiry alerts and notify L2 team
- Validate Conditional Access policy failures
- Maintain daily security monitoring reports
- Participate in shift handover documentation
- Ensure SLA compliance for ticket updates
- Maintain proper incident documentation and closure notes
- Any other ad-hoc duties as assigned by supervisors
Skills
Tools
Job description
Provides 24x7 first-level security monitoring and alert triage across identity, Microsoft 365, endpoint, and Azure security platforms. Responsible for early detection, proper ticketing, and timely escalation of security events.
- Monitor Entra ID sign-in logs and authentication alerts
- Perform first-level triage of suspicious login attempts
- Monitor MFA failures and abnormal sign-in patterns
- Review Exchange Online Protection spam/phishing alerts
- Monitor Trend Micro endpoint alerts
- Monitor CyberArk EPM & PAM
- Monitor Azure security dashboards and alert queues
- Create and update security incident tickets
- Perform initial investigation using defined runbooks
- Escalate confirmed threats to L2 Security Engineer
- Track certificate expiry alerts and notify L2 team
- Validate Conditional Access policy failures
- Maintain daily security monitoring reports
- Participate in shift handover documentation
- Ensure SLA compliance for ticket updates
- Maintain proper incident documentation and closure note
- Any other ad-hoc duties as assigned by supervisors
- Microsoft Entra ID (Basic Administration)
- Active Directory Authentication Monitoring
- Microsoft MFA
- Exchange Online Protection
- Trend Micro Endpoint & Email Security
- CyberArk EPM & PAM
- Azure Monitor
- Log Analytics
- Microsoft Defender (Monitoring Level)
- Basic PKI Awareness
- ITSM / Ticketing Tools
'/%3e%3cpath%20d='M101.744%2012.4726L102.894%2016.1947L99.0021%2013.2201L101.744%2012.4726ZM105.3%208.40937H100.488L99.0026%203.59473L97.5116%208.41047L92.7%208.40385L96.5965%2011.3834L95.1055%2016.1942L99.0021%2013.2196L101.408%2011.3834L105.3%208.40992V8.40937Z'%20fill='white'/%3e%3cdefs%3e%3clinearGradient%20id='paint0_linear_5593_1381'%20x1='90'%20y1='9.44471'%20x2='99'%20y2='9.44471'%20gradientUnits='userSpaceOnUse'%3e%3cstop%20stop-color='%2300AD70'/%3e%3cstop%20offset='0.998594'%20stop-color='%2300B67A'/%3e%3cstop%20offset='1'%20stop-color='%23DCDCE6'/%3e%3c/linearGradient%3e%3c/defs%3e%3c/svg%3e){kind=small}
