Security Operations Analyst: Incident Response & SIEM Expertise

KRIS INFOTECH PTE. LTD.; Singapore; On-site; SGD 50,000 - 90,000; Full time

Job summary

KRIS INFOTECH PTE. LTD. seeks a Security Operations professional to monitor alerts from Trend Micro and Microsoft Sentinel, triage incidents, and investigate using log analysis and threat intelligence. You will escalate to L2/L3 and perform initial containment per playbooks, while tuning rules to minimize noise.

The role requires 2–4 years in a SOC or IT security role, with hands-on SIEM experience and familiarity with vulnerability scanners and DLP concepts.

Qualifications

• Diploma or Bachelor's degree in Cybersecurity, IT, Computer Science, or a related field (or equivalent experience).
• 2-4 years in a SOC, security operations, or IT security role.
• Hands-on experience with a SIEM (Microsoft Sentinel preferred) and endpoint or XDR tools (Trend Micro preferred).
• Experience with vulnerability scanners (Tenable preferred) and patch management processes.
• Understanding of DLP concepts and tools, and of the incident response lifecycle and MITRE ATT&CK.
• Preferred certifications: CompTIA Security+, Microsoft SC-200, or Trend Micro certifications.
• Nice to have: CEH, GCIH, GCIA, Tenable certifications, or Azure/AWS security certifications.

Responsibilities

• Monitor alerts and dashboards across Trend Micro (Vision One, Deep Security, Apex One), Microsoft Sentinel, and other security tools.
• Triage alerts, separate true from false positives, and prioritise by severity and business impact.
• Investigate suspicious activity using log analysis, KQL queries, and threat intelligence.
• Escalate confirmed incidents to L2/L3 or incident response with clear evidence.
• Carry out initial containment per playbooks, such as isolating endpoints or blocking indicators.
• Tune detection rules and alert thresholds to reduce noise.

Skills

KQL queries

Log analysis

MITRE ATT&CK

Incident response lifecycle

Threat intelligence

Patch management processes

Vulnerability management

DLP concepts

Communication

Education

Bachelor's degree in Cybersecurity, IT, or Computer Science

Tools

Microsoft Sentinel

Trend Micro XDR/EDR

Tenable

Job description

KRIS INFOTECH PTE. LTD. seeks a Security Operations professional to monitor alerts from Trend Micro and Microsoft Sentinel, triage incidents, and investigate using log analysis and threat intelligence. You will escalate to L2/L3 and perform initial containment per playbooks, while tuning rules to minimize noise.

The role requires 2–4 years in a SOC or IT security role, with hands-on SIEM experience and familiarity with vulnerability scanners and DLP concepts.