Security Operations Analyst — 24/7 Onsite

Ensign Infosecurity (Cybersecurity) Pte Ltd; Singapore; Hybrid; SGD 60,000 - 90,000; Full time

Job summary

Ensign InfoSecurity in Singapore is seeking a motivated SOC Analyst to monitor security alerts, perform initial investigations and triage incidents in a 24×7, 12-hour rotating shift environment in Tampines. You will work onsite and ensure timely escalation and documentation of findings.

The ideal candidate has 2+ years in SOC operations, hands-on experience with SIEMs such as Splunk or IBM QRadar, familiarity with EDR/NDR, and knowledge of MITRE ATT&CK. Security certifications are a plus.

Qualifications

• 2+ years of SOC operations experience.
• Hands-on experience with SIEM platforms such as Splunk, IBM QRadar, Google SecOps or equivalent.
• Familiarity with EDR, NDR and other cybersecurity monitoring tools.
• Good understanding of cybersecurity threats, incident response processes and the MITRE ATT&CK framework.
• Strong analytical, troubleshooting and incident documentation skills.
• Good written and verbal communication skills in English.
• Able to work onsite in Tampines on 12-hour rotating shifts, including weekends and public holidays.
• Must be able to obtain and maintain the required security clearance.
• Relevant cybersecurity certifications such as CompTIA Security+, GCIH, Splunk certifications or equivalent will be advantageous.

Responsibilities

• Monitor and analyse security alerts from SIEM, EDR, NDR and other security monitoring platforms.
• Perform initial investigation, triage and classification of security alerts to identify potential cyber threats and incidents.
• Escalate security incidents to Level 2 analysts and relevant stakeholders in accordance with established procedures and SLAs.
• Conduct initial incident investigation, including log analysis, threat intelligence enrichment and identification of affected systems.
• Execute pre-approved containment actions in accordance with established SOPs.
• Maintain accurate incident records, investigation findings and escalation details in designated case management systems.
• Perform structured shift handovers to ensure continuity of security monitoring and incident management.
• Identify false positives and recommend improvements to detection rules, SOPs and monitoring processes.
• Support cybersecurity exercises, operational readiness activities and continuous improvement initiatives.

Skills

Analytical thinking

Troubleshooting

Documentation

English proficiency

Tools

Splunk

IBM QRadar

Google SecOps

EDR

NDR

Job description

Ensign InfoSecurity in Singapore is seeking a motivated SOC Analyst to monitor security alerts, perform initial investigations and triage incidents in a 24×7, 12-hour rotating shift environment in Tampines. You will work onsite and ensure timely escalation and documentation of findings.

The ideal candidate has 2+ years in SOC operations, hands-on experience with SIEMs such as Splunk or IBM QRadar, familiarity with EDR/NDR, and knowledge of MITRE ATT&CK. Security certifications are a plus.