Security Operations (SOC)

RED ALPHA CYBERSECURITY PTE. LTD.; Singapore; Vor Ort; SGD 65.000 - 110.000; Vollzeit

Zusammenfassung

RED ALPHA CYBERSECURITY PTE. LTD. is seeking an experienced SOC Analyst to support Security Operations Centre activities, including monitoring, investigation, threat hunting, and incident response.

The role acts as a second line of defence, translating alerts into actionable findings and helping to improve detection capabilities across SIEM, EDR/XDR, cloud, and identity security. You will perform L2 triage, work independently in a SOC environment, and contribute to playbooks and tooling

Qualifikationen

• 3+ years in SOC operations or incident response (L2 preferred).
• Experience with SIEM, EDR/XDR, and cloud/identity security tools.
• Strong understanding of MITRE ATT&CK and threat analysis.
• Hands-on incident investigation or threat hunting experience.

Aufgaben

• L2 triage and investigation of security alerts across SIEM/EDR/XDR, email, identity, network, and cloud.
• Correlate events to identify root cause, scope, and impact of incidents.
• Investigate phishing, malware, account compromise and unauthorized access.
• Threat hunting using threat intelligence and MITRE ATT&CK.
• Support containment, remediation and recovery activities.
• Contribute to SOC improvements (playbooks, detection tuning, onboarding of new tools).

Kenntnisse

SOC Operations

Incident Response

Threat Hunting

MITRE ATT&CK

SIEM

EDR/XDR

Cloud Security

Identity Security

Ausbildung

Degree or Diploma in Cybersecurity/IT

Tools

SIEM

EDR/XDR

Identity Security Tools

Jobbeschreibung

Role Overview

This role supports Security Operations Centre (SOC) activities, including monitoring, investigation, threat hunting, and incident response. The resourceoperatesas a second line of defence, translating alerts into actionable findings and improving detection capability.

Core Responsibilities

• Perform L2 triage and investigation of security alerts across SIEM, EDR/XDR, email, identity, network, and cloud platforms
• Correlate events toidentifyroot cause, scope, and impact of security incidents
• Investigate phishing, malware, account compromise, and unauthorised access cases
• Conduct proactive threat hunting using threat intelligence and MITRE ATT&CK
• Support containment, remediation, and recovery activities
• Contribute to SOC improvements (playbooks, detection tuning, onboarding of new tools)

Core Requirements

• Degree or Diploma in Cybersecurity, IT, or related field
• At least 3 years of experience in SOC operations or incident response (L2 preferred)
• Experience with SIEM, EDR/XDR, and cloud or identity security tools
• Strong understanding of attack chains, MITRE ATT&CK, and threat analysis
• Demonstrated hands‑on experience in incident investigation or threat hunting
• Ability tooperateindependently in a SOC environment