Security Operations Centre (SOC) Analyst

Ensign Infosecurity (Cybersecurity) Pte Ltd; Singapore; Hybrid; SGD 60,000 - 90,000; Full time

Job summary

Ensign InfoSecurity in Singapore is seeking a motivated SOC Analyst to monitor security alerts, perform initial investigations and triage incidents in a 24×7, 12-hour rotating shift environment in Tampines. You will work onsite and ensure timely escalation and documentation of findings.

The ideal candidate has 2+ years in SOC operations, hands-on experience with SIEMs such as Splunk or IBM QRadar, familiarity with EDR/NDR, and knowledge of MITRE ATT&CK. Security certifications are a plus.

Qualifications

• 2+ years of SOC operations experience.
• Hands-on experience with SIEM platforms such as Splunk, IBM QRadar, Google SecOps or equivalent.
• Familiarity with EDR, NDR and other cybersecurity monitoring tools.
• Good understanding of cybersecurity threats, incident response processes and the MITRE ATT&CK framework.
• Strong analytical, troubleshooting and incident documentation skills.
• Good written and verbal communication skills in English.
• Able to work onsite in Tampines on 12-hour rotating shifts, including weekends and public holidays.
• Must be able to obtain and maintain the required security clearance.
• Relevant cybersecurity certifications such as CompTIA Security+, GCIH, Splunk certifications or equivalent will be advantageous.

Responsibilities

• Monitor and analyse security alerts from SIEM, EDR, NDR and other security monitoring platforms.
• Perform initial investigation, triage and classification of security alerts to identify potential cyber threats and incidents.
• Escalate security incidents to Level 2 analysts and relevant stakeholders in accordance with established procedures and SLAs.
• Conduct initial incident investigation, including log analysis, threat intelligence enrichment and identification of affected systems.
• Execute pre-approved containment actions in accordance with established SOPs.
• Maintain accurate incident records, investigation findings and escalation details in designated case management systems.
• Perform structured shift handovers to ensure continuity of security monitoring and incident management.
• Identify false positives and recommend improvements to detection rules, SOPs and monitoring processes.
• Support cybersecurity exercises, operational readiness activities and continuous improvement initiatives.

Skills

Analytical thinking

Troubleshooting

Documentation

English proficiency

Tools

Splunk

IBM QRadar

Google SecOps

EDR

NDR

Job description

Ensign is hiring !

Working Hours: 12-hour rotating shifts (Day/Night), 24×7 operations

Job Responsibilities

• Monitor and analyse security alerts from SIEM, EDR, NDR and other security monitoring platforms.
• Perform initial investigation, triage and classification of security alerts to identify potential cyber threats and incidents.
• Escalate security incidents to Level 2 analysts and relevant stakeholders in accordance with established procedures and SLAs.
• Conduct initial incident investigation, including log analysis, threat intelligence enrichment and identification of affected systems.
• Execute pre-approved containment actions in accordance with established Standard Operating Procedures (SOPs).
• Maintain accurate incident records, investigation findings and escalation details in designated case management systems.
• Perform structured shift handovers to ensure continuity of security monitoring and incident management.
• Identify false positives and recommend improvements to detection rules, SOPs and monitoring processes.
• Support cybersecurity exercises, operational readiness activities and continuous improvement initiatives.

Job Requirements

• Singapore Citizen or Permanent Resident residing in Singapore.
• Minimum 2 years of relevant SOC operations experience.
• Hands-on experience with SIEM platforms such as Splunk, IBM QRadar, Google SecOps or equivalent.
• Familiarity with EDR, NDR and other cybersecurity monitoring tools.
• Good understanding of cybersecurity threats, incident response processes and the MITRE ATT&CK framework.
• Strong analytical, troubleshooting and incident documentation skills.
• Good written and verbal communication skills in English.
• Able to work onsite in Tampines on 12-hour rotating shifts, including weekends and public holidays.
• Must be able to obtain and maintain the required security clearance.
• Relevant cybersecurity certifications such as CompTIA Security+, GCIH, Splunk certifications or equivalent will be advantageous.

About Ensign InfoSecurity

Ensign InfoSecurity is the largest pure-play cybersecurity service provider in Asia. The company is headquartered in Singapore. We specialise in the provision of these services; cybersecurity advisory and assurance, implementation and management of advanced cybersecurity controls, cybersecurity monitoring, threat hunting, and incident response. Underpinning these competencies is in-house research and development in cybersecurity.

What Makes Ensign Special?

We are a technology company with warmth and soul. We are ambitious, propelled by our vision to be the cyber defender of choice, and fueled by the dedication and camaraderie of individuals who are eager to make a difference, and leave their footprints in the industry.

If you are a self-motivated curious go-getter, we want You! Join Us!