Security Operations (SOC) L2

INSYGHTS SECURITY PTE. LTD.; Singapore; On-site; SGD 70,000 - 110,000; Full time

Job summary

INSYGHTS SECURITY PTE. LTD. in Singapore is seeking a second-line SOC professional to monitor, investigate, and hunt threats, translating alerts into actionable findings to strengthen detection capabilities.

This role focuses on effective incident response and proactive threat hunting across diverse environments. You will work with SIEM, EDR/XDR, and cloud/identity security tools, performing L2 triage, correlating events to determine root causes, and supporting containment, remediation, and

Qualifications

• Degree or Diploma in Cybersecurity, IT, or related field.
• At least 3 years of experience in SOC operations or incident response (L2 preferred).
• Experience with SIEM, EDR/XDR, and cloud or identity security tools.

Responsibilities

• Perform L2 triage and investigation of security alerts across SIEM, EDR/XDR, email, identity, network, and cloud platforms
• Correlate events to identify root cause, scope, and impact of security incidents
• Investigate phishing, malware, account compromise, and unauthorised access cases
• Conduct proactive threat hunting using threat intelligence and MITRE ATT&CK
• Support containment, remediation, and recovery activities
• Contributeto SOC improvements (playbooks, detection tuning, onboarding of new tools)

Skills

SOC operations

Incident response

Threat hunting

MITRE ATT&CK

Cloud security

Education

Degree/Diploma in Cybersecurity

Tools

SIEM

EDR/XDR

Cloud security tools

Identity security tools

Job description

Role Overview

This role supports Security Operations Centre (SOC) activities, including monitoring, investigation, threat hunting, and incident response. The resource operates as a second line of defense, translating alerts into actionable findings and improving detection capability.

Core Responsibilities

• Perform L2 triage and investigation of security alerts across SIEM, EDR/XDR, email, identity, network, and cloud platforms
• Correlate events to identify root cause, scope, and impact of security incidents
• Investigate phishing, malware, account compromise, and unauthorised access cases
• Conduct proactive threat hunting using threat intelligence and MITRE ATT&CK
• Support containment, remediation, and recovery activities
• Contributeto SOC improvements (playbooks, detection tuning, onboarding of new tools)

Core Requirements

• Degree or Diploma in Cybersecurity, IT, or related field
• At least 3 years of experience in SOC operations or incident response (L2 preferred)
• Experience with SIEM, EDR/XDR, and cloud or identity security tools
• Strong understanding of attack chains, MITRE ATT&CK, and threat analysis
• Demonstrated hands-on experience in incident investigation or threat hunting
• Ability to operate independently in a SOC environment