Senior CSIRT Analyst — 24/7 Cyber Defense (Singapore)

TD Bank Financial Group; Singapore; On-site; SGD 120,000 - 170,000; Full time

Job summary

TD Bank Financial Group in Singapore seeks a Cyber Security Incident Response Analyst to join the CSIRT in our fusion center. You will investigate security incidents, perform malware analysis, and develop SIEM/EDR-based detections while coordinating closely with technology teams and executives.

You will participate in a global follow-the-sun model with 7am–4pm local hours and rotational weekend on-call coverage, contributing to risk assessments and rapid remediation.

Qualifications

• Demonstrated experience investigating security incidents and complex alerts in an enterprise environment.
• Hands-on ability to perform static and dynamic malware analysis.
• Advanced knowledge of security alert analysis, incident and event management, log analysis, network traffic analysis, malware investigation and remediation, identify and respond to emerging AI-driven threats and threat-actor TTPs.
• Apply AI-led automation and SOAR to streamline threat investigation, containment, escalation, and reporting, improving the speed and consistency of incident response.
• Expert knowledge of, and hands-on experience with, SIEM-based detection use cases, correlation logic, and alert generation.
• Expert hands-on experience with enterprise-grade endpoint detection and response solutions.
• Strong analytical and problem-solving skills, including the ability to turn incomplete or complex technical evidence into prioritized, actionable insights.
• Excellent written and verbal communication skills, with the ability to explain technical risk, options, and recommended actions in business terms to technology teams, business stakeholders, and executives.

Responsibilities

• Independently investigate and contribute to triage, containment, remediation, and post-incident review of complex cyber security events.
• Perform deep-dive analysis to identify initial access vector, attacker activity, affected assets, persistence, lateral movement, data exfiltration risk, and control gaps.
• Analyze security alerts, endpoint telemetry, network traffic, logs, malware behavior to test hypotheses.
• Conduct static and dynamic malware analysis and support active threat-hunting during investigations.
• Develop and refine SIEM correlation logic, alerting, and detection use cases based on attacker TTPs.
• Use EDR capabilities to investigate suspicious activity and support containment/remediation.
• Provide timely investigation updates, risk assessments, and actions to partners and executives.
• Partner with teams to implement containment and remediation to reduce recurrence.

Skills

Incident response

Malware analysis

AI automation

SOAR

SIEM use cases

EDR

Communication skills

Documentation

Tools

SIEM tools

EDR tools

Forensics tools

Job description

TD Bank Financial Group in Singapore seeks a Cyber Security Incident Response Analyst to join the CSIRT in our fusion center. You will investigate security incidents, perform malware analysis, and develop SIEM/EDR-based detections while coordinating closely with technology teams and executives.

You will participate in a global follow-the-sun model with 7am–4pm local hours and rotational weekend on-call coverage, contributing to risk assessments and rapid remediation.