Senior Information Security Analyst 24x7 Incident Response

TD; Singapore; On-site; SGD 120,000 - 180,000; Full time

Job summary

TD Singapore is seeking an experienced Cyber Security Incident Response Analyst to join the CSIRT in our fusion center. You will investigate complex cyber security events, perform malware analysis, enhance SIEM/EDR use cases, and participate in 24x7 follow-the-sun operations with weekend on-call.

This on-site role in Singapore offers exposure to global teams and a chance to influence security controls and incident response for a major financial services provider.

Qualifications

• Experience investigating security incidents and complex alerts in an enterprise environment.
• Hands-on ability to perform static and dynamic malware analysis.
• Advanced knowledge of security alert analysis, incident and event management, log analysis, network traffic analysis, malware investigation and remediation, identify and respond to emerging AI-driven threats and threat-actor TTPs.
• Apply AI-led automation and SOAR to streamline threat investigation, containment, escalation, and reporting, improving the speed and consistency of incident response.
• Expert knowledge of, and hands-on experience with, SIEM-based detection use cases, correlation logic, and alert generation.
• Expert hands-on experience with enterprise-grade endpoint detection and response solutions.
• Strong analytical and problem-solving skills, including the ability to turn incomplete or complex technical evidence into prioritized, actionable insights.
• Excellent written and verbal communication skills, with the ability to explain technical risk, options, and recommended actions in business terms to technology teams, business stakeholders, and executives.
• Strong organization and case-management discipline, including the ability to manage multiple investigative priorities and maintain clear documentation.
• Ability and willingness to participate in rotational weekend on-call coverage.

Responsibilities

• Independently investigate and contribute to the triage, containment, remediation, and post-incident review of complex cyber security events, escalating material risks and decisions through the appropriate channels.
• Perform deep-dive analysis to identify the initial access vector, attacker activity, affected assets, persistence, lateral movement, potential data exfiltration, root cause, and control or process gaps.
• Analyze security alerts, endpoint telemetry, network traffic, logs, malware behavior, and other available evidence to form and test investigation hypotheses.
• Conduct static and dynamic malware analysis, where appropriate, and support active threat-hunting activities during investigations.
• Develop and refine SIEM correlation logic, alerting, and detection use cases based on observed attacker tactics, techniques, and procedures (TTPs).
• Use enterprise endpoint detection and response capabilities to investigate suspicious activity and support timely containment and remediation.
• Provide clear, timely investigation updates, risk assessments, and recommended actions to fusion-center partners, technology teams, business stakeholders, and executives.
• Partner with relevant teams to implement immediate containment measures and longer-term remediation that reduces the likelihood or impact of recurrence.
• Document investigation findings, evidence, decisions, and lessons learned in a manner that supports operational follow-through and stakeholder understanding.
• Participate in rotational weekend on-call coverage and support the team’s global follow-the-sun operating model.

Skills

Incident response

Malware analysis

SIEM

EDR

Threat hunting

SOAR

Tools

SIEM platforms

Endpoint security tools

Job description

TD Singapore is seeking an experienced Cyber Security Incident Response Analyst to join the CSIRT in our fusion center. You will investigate complex cyber security events, perform malware analysis, enhance SIEM/EDR use cases, and participate in 24x7 follow-the-sun operations with weekend on-call.

This on-site role in Singapore offers exposure to global teams and a chance to influence security controls and incident response for a major financial services provider.