Security Operations Analyst — Endpoint & Identity Automation

SEA Singapore; Singapore; On-site; SGD 80,000 - 120,000; Full time

Job summary

SEA Singapore is seeking an early-career security professional to support day-to-day security operations and administer CrowdStrike Falcon. You will investigate endpoint and identity-related security issues and contribute to automation using Fusion SOAR, scripting, APIs, and AI-assisted capabilities.

The role focuses on hands-on troubleshooting, platform administration, and continuous improvement within a security operations context in Singapore.

Qualifications

• Bachelor’s degree in Computer Engineering, Cybersecurity, Information Security, Computer Science, or related discipline.
• Experience in security alert investigation or incident handling.
• Experience with EDR or endpoint security platform administration.
• Experience with Active Directory or identity security administration and troubleshooting.
• Experience with security automation, SOAR, scripting, or API integration.
• Strong platform administration and troubleshooting skills, preferably with CrowdStrike Falcon or similar.
• Solid knowledge of EDR concepts, endpoint telemetry, threat detection, containment, and incident response.
• Proficient in Microsoft Active Directory concepts (users, groups, permissions, authentication, GPOs, DCs).
• Hands-on scripting or API integration (Python/PowerShell) preferred.
• Experience using AI tools to support security investigation or automation is an advantage.

Responsibilities

• Handle day-to-day security alerts, incidents, operational issues, and service requests.
• Investigate endpoint and identity-related security issues using CrowdStrike telemetry and logs.
• Support containment and remediation activities including host isolation and evidence collection.
• Manage security requests such as policy changes, exclusions, and follow-ups.
• Administer CrowdStrike Falcon capabilities and related integrations.
• Monitor sensor health, platform coverage, and policy compliance.
• Configure and maintain endpoint, identity, and automation policies.
• Develop and maintain Fusion SOAR workflows for alert enrichment and automation.
• Troubleshoot CrowdStrike sensor, policy, integration, and AD-related issues.
• Maintain operational procedures, investigation guides, and playbooks.
• Participate in security operations, platform improvements, and automation initiatives.

Skills

Security alert investigation

EDR / endpoint security

Active Directory administration

SOAR / automation

Scripting / API integration

CrowdStrike Falcon

Incident response

Threat detection

Education

Bachelor’s degree in Computer Engineering / Cybersecurity / Information Security / Computer Science

Tools

CrowdStrike Falcon

Fusion SOAR

PowerShell

Python

APIs

Job description

SEA Singapore is seeking an early-career security professional to support day-to-day security operations and administer CrowdStrike Falcon. You will investigate endpoint and identity-related security issues and contribute to automation using Fusion SOAR, scripting, APIs, and AI-assisted capabilities.

The role focuses on hands-on troubleshooting, platform administration, and continuous improvement within a security operations context in Singapore.