Senior CSIRT Analyst - 24/7 Incident Response (Singapore)

TD Securities Inc.; Singapore; On-site; SGD 90,000 - 140,000; Full time

Job summary

TD Securities Singapore is building a world-class Cyber Security Incident Response Team. The role involves independent investigation of complex cyber events, malware analysis, and robust SIEM/EDR use cases.

You will work in TD Bank’s fusion center in Singapore, supporting a 24x7 follow-the-sun model and weekend on-call coverage. As part of the CSIRT, you will partner with technology and business teams, deliver timely risk assessments, and drive containment and remediation.

Qualifications

• Experience investigating security incidents and complex alerts in enterprise.
• Hands-on malware analysis (static/dynamic).
• Knowledge of SIEM, incident management, log analysis, network traffic, and threat-actor TTPs.

Responsibilities

• Investigate and triage complex security events, escalate risks as needed.
• Perform static and dynamic malware analysis and support threat hunting.
• Develop SIEM use cases and improve alerting logic, ensuring timely updates to stakeholders.
• Contribute to containment and remediation plans with fusion-center partners and tech teams.
• Document findings and lessons learned to support follow-up actions.

Skills

Incident response

Malware analysis

SIEM usage

AI/SOAR automation

EDR

Communication skills

Threat intelligence

Education

Cybersecurity certification

Tools

SIEM

EDR

Job description

TD Securities Singapore is building a world-class Cyber Security Incident Response Team. The role involves independent investigation of complex cyber events, malware analysis, and robust SIEM/EDR use cases.

You will work in TD Bank’s fusion center in Singapore, supporting a 24x7 follow-the-sun model and weekend on-call coverage. As part of the CSIRT, you will partner with technology and business teams, deliver timely risk assessments, and drive containment and remediation.