Senior Cyber Incident Responder & IR Lead

CAREERALLY PTE. LTD.; Singapore; On-site; SGD 120,000 - 180,000; Full time

Benefits offered by this job

Good Bonuses

Near MRT

Family Friendly Environment

Job summary

CAREERALLY PTE. LTD. in Singapore seeks a senior SOC/IR analyst to investigate and analyse security alerts escalated from L1 using SIEM, EDR and related tools. You will lead containment, eradication and recovery efforts, and perform threat hunting with MITRE ATT&CK frameworks.

The role emphasizes automation, thorough documentation, and guiding L1 analysts to strengthen SOC operations and incident response capabilities.

Qualifications

• At least a Diploma in Computer Science or related field with 6+ years SOC/CERT/IR experience.
• Strong skills in incident investigation, log analysis, and event correlation.
• Hands‑on experience with SIEM, EDR, SOAR, and Windows/Linux environments.
• Familiar with MITRE ATT&CK, Cyber Kill Chain, OWASP, with basic scripting (Python/Bash/PowerShell).

Responsibilities

• Investigate and analyse security alerts escalated from L1 using SIEM, EDR, and other security tools.
• Lead incident response activities including containment, eradication, and recovery.
• Perform threat hunting using IOC analysis and threat intelligence frameworks (e.g., MITRE ATT&CK).
• Improve SOC operations through automation, documentation, and guidance to L1 analysts.

Skills

Incident investigation

Log analysis

Event correlation

MITRE ATT&CK

Cyber Kill Chain

OWASP

Python scripting

Bash scripting

PowerShell scripting

Education

Diploma in Computer Science or related field

Tools

SIEM

EDR

SOAR

Windows OS

Linux OS

Job description

CAREERALLY PTE. LTD. in Singapore seeks a senior SOC/IR analyst to investigate and analyse security alerts escalated from L1 using SIEM, EDR and related tools. You will lead containment, eradication and recovery efforts, and perform threat hunting with MITRE ATT&CK frameworks.

The role emphasizes automation, thorough documentation, and guiding L1 analysts to strengthen SOC operations and incident response capabilities.