Security Operations (SOC)

RED ALPHA CYBERSECURITY PTE. LTD.; Singapore; On-site; SGD 60,000 - 80,000; Full time

Job summary

RED ALPHA CYBERSECURITY PTE. LTD. in Singapore is seeking a dedicated professional to support Security Operations Centre (SOC) activities. The successful candidate will be involved in monitoring, investigation, threat hunting, and incident response, serving as a critical second line of defense.

A Degree or Diploma in Cybersecurity or IT with at least 3 years of experience in SOC operations is required. The role demands a strong grasp of attack chains and hands-on skills in incident investigation. Join us to enhance our detection capabilities and SOC processes.

Qualifications

• Degree or Diploma in Cybersecurity, IT, or related field.
• At least 3 years of experience in SOC operations or incident response (L2 preferred).
• Experience with SIEM, EDR/XDR, and cloud or identity security tools.
• Strong understanding of attack chains, MITRE ATT&CK, and threat analysis.
• Demonstrated hands-on experience in incident investigation or threat hunting.
• Ability to operate independently in a SOC environment.

Responsibilities

• Perform L2 triage and investigation of security alerts across SIEM, EDR/XDR, email, identity, network, and cloud platforms.
• Correlate events to identify root cause, scope, and impact of security incidents.
• Investigate phishing, malware, account compromise, and unauthorized access cases.
• Conduct proactive threat hunting using threat intelligence and MITRE ATT&CK.
• Support containment, remediation, and recovery activities.
• Contribute to SOC improvements (playbooks, detection tuning, onboarding of new tools).

Job description

Role Overview

This role supports Security Operations Centre (SOC) activities, including monitoring, investigation, threat hunting, and incident response. The resource operates as a second line of defence, translating alerts into actionable findings and improving detection capability.

Core Responsibilities

• Perform L2 triage and investigation of security alerts across SIEM, EDR/XDR, email, identity, network, and cloud platforms
• Correlate events to identify root cause, scope, and impact of security incidents
• Investigate phishing, malware, account compromise, and unauthorised access cases
• Conduct proactive threat hunting using threat intelligence and MITRE ATT&CK
• Support containment, remediation, and recovery activities
• Contribute to SOC improvements (playbooks, detection tuning, onboarding of new tools)

Core Requirements

• Degree or Diploma in Cybersecurity, IT, or related field
• At least 3 years of experience in SOC operations or incident response (L2 preferred)
• Experience with SIEM, EDR/XDR, and cloud or identity security tools
• Strong understanding of attack chains, MITRE ATT&CK, and threat analysis
• Demonstrated hands‑on experience in incident investigation or threat hunting
• Ability to operate independently in a SOC environment