Security Operations SOC Analyst

Red Alpha Cybersecurity; Singapore; On-site; SGD 70,000 - 110,000; Full time

Job summary

Red Alpha Cybersecurity in Singapore is seeking an experienced SOC Analyst to support security operations, including monitoring, investigation, threat hunting, and incident response.

The role requires hands-on incident investigation, L2 triage, and the ability to work independently in a SOC, with knowledge of MITRE ATT&CK and SIEM/EDR/XDR tools.

You’ll analyze alerts across cloud, identity, email, and network, helping to contain threats and improve detection capabilities.

Qualifications

• Degree or Diploma in Cybersecurity, IT, or related field.
• At least 3 years of SOC operations or IR experience (L2 preferred).
• Experience with SIEM, EDR/XDR, and cloud/identity security tools.
• Strong knowledge of attack chains, MITRE ATT&CK, and threat analysis.
• Hands-on incident investigation or threat hunting experience.
• Able to work independently in a SOC environment.

Responsibilities

• L2 triage and investigation of security alerts across SIEM, EDR/XDR, email, identity, network, and cloud.
• Correlate events to determine root cause, scope, and impact.
• Investigate phishing, malware, account compromise, and unauthorized access cases.
• Proactive threat hunting using threat intel and MITRE ATT&CK.
• Support containment, remediation, and recovery activities.
• Contribute to SOC improvements (playbooks, detection tuning, onboarding of new tools).

Skills

SOC operations

Incident response

Threat hunting

MITRE ATT&CK

SIEM

EDR/XDR

Cloud security

Identity security

Independent work

Education

Degree or Diploma in Cybersecurity

Tools

SIEM systems

EDR/XDR platforms

Cloud security tools

Job description

This role supports Security Operations Centre (SOC) activities, including monitoring, investigation, threat hunting, and incident response. The resource operates as a second line of defence, translating alerts into actionable findings and improving detection capability.

Core Responsibilities

• Perform L2 triage and investigation of security alerts across SIEM, EDR/XDR, email, identity, network, and cloud platforms
• Correlate events to identify root cause, scope, and impact of security incidents
• Investigate phishing, malware, account compromise, and unauthorised access cases
• Conduct proactive threat hunting using threat intelligence and MITRE ATT&CK
• Support containment, remediation, and recovery activities
• Contribute to SOC improvements (playbooks, detection tuning, onboarding of new tools)

Core Requirements

• Degree or Diploma in Cybersecurity, IT, or related field
• At least 3 years of experience in SOC operations or incident response (L2 preferred)
• Experience with SIEM, EDR/XDR, and cloud or identity security tools
• Strong understanding of attack chains, MITRE ATT&CK, and threat analysis
• Demonstrated hands-on experience in incident investigation or threat hunting
• Ability to operate independently in a SOC environment
• Commensurate with experience and qualifications

By submitting your application for this position, you consent to the collection, use, and disclosure of your personal data by RED ALPHA CYBERSECURITY for the purpose of i) employment facilitation and ii) data and statistical analysis. You may find out more information on the PDPA policies at https://www.redalphacyber.com/privacy-policy.