Senior IT Security Analyst

GREEN LINK DIGITAL BANK PTE. LTD.; Singapore; On-site; SGD 80,000 - 110,000; Full time

Job summary

A financial institution in Singapore is looking for a Cybersecurity specialist to lead vulnerability assessments and incident responses. Ideal candidates should have at least 5 years of experience in cybersecurity, expertise in vulnerability management tools, and a strong knowledge of the Singapore Banking regulatory landscape. This role involves collaboration across teams to enhance security measures.

Qualifications

• 5-8 years of progressive experience in cybersecurity roles.
• Proven hands-on experience with vulnerability scanning tools.
• Strong understanding of security frameworks and standards.

Responsibilities

• Lead and execute comprehensive vulnerability assessments.
• Manage and optimize vulnerability management tools and platforms.
• Conduct forensic analysis of security incidents.

Skills

Vulnerability Management

Cybersecurity

Incident Response

Threat Intelligence

Security Audits

Education

Bachelor's degree in Computer Science or equivalent

Tools

Nessus

Splunk

CrowdStrike

Job description

About Us

Green Link Digital Bank is Singapore's inaugural wholesale digital bank focusing on supply chain finance, mainly serving MSMEs and aiming to help MSMEs grow and improve digitization.

Responsibilities

• Lead and execute comprehensive vulnerability assessments, and security scanning across various systems, applications, networks, and cloud environments.
• Analyse scan results, prioritize vulnerabilities based on risk, and work closely with IT, development, and business teams to ensure timely remediation.
• Develop and implement strategies for continuous vulnerability monitoring and reporting.
• Manage and optimise vulnerability management tools and platforms.
• Stay current with the latest vulnerability trends, exploits, and threat intelligence.
• Perform advanced threat hunting, incident detection, and analysis using Security Information and Event Management (SIEM) systems, Endpoint Detection and Response (EDR) tools, network intrusion detection/prevention systems (IDS/IPS), and other security technologies.
• Lead and manage security incidents from detection through containment, eradication, recovery, and post-incident analysis.
• Develop, refine, and maintain incident response playbooks and standard operating procedures (SOPs).
• Conduct forensic analysis of security incidents to determine root causes and recommend preventative measures.
• Contribute to the continuous improvement of SOC processes, tools, and capabilities.
• Evaluate internal and external environments for security threats and vulnerabilities, acting as a subject matter expert to ensure they are properly addressed.
• Collaborate with cross-functional teams (IT, Development, Infrastructure, etc.) to implement security best practices and secure system configurations.
• Participate in security audits and provide support for compliance initiatives.
• Recommend and implement security enhancements to strengthen the overall security posture.
• Contribute to the development of security awareness training for staff.
• Lead security-related projects and initiatives as assigned.

Requirements

• Bachelor’s degree in Computer Science, Cyber Security, Information Systems, Information Technology, Engineering, or equivalent education.
• 5-8 years of progressive experience in cybersecurity roles, with a strong focus on Vulnerability Management and Security Operations Center (SOC) functions.
• Proven hands-on experience with vulnerability scanning tools (e.g., Nessus, Qualys, Rapid7 Nexpose, InsightVM) and penetration testing methodologies.
• Expertise in analysing security alerts, logs, and network traffic for suspicious activity.
• In-depth knowledge of SIEM platforms (e.g., Splunk, QRadar, Azure Sentinel) and EDR solutions (e.g., CrowdStrike, Microsoft Defender ATP).
• Strong understanding of security frameworks and standards (e.g., NIST, ISO 27001, MITRE ATT&CK).
• Experience with incident response processes, including detection, analysis, containment, eradication, and recovery.
• Familiarity with network protocols, operating systems (Windows, Linux), and cloud security concepts (AWS, Azure, GCP).
• Excellent analytical, problem-solving, and critical thinking skills.
• Strong communication and interpersonal skills, with the ability to articulate complex technical information to diverse audiences.
• Ability to work independently and collaboratively in a fast-paced, dynamic environment.
• Demonstrable deep understanding of the Singapore Banking regulatory landscape and requirements.
• Preferably a holder of one or more of the following information security qualifications: CISSP, CEH, GCIH, GCIA, BTL2, CCD and etc.
• Able to multi-task and prioritize in a high-pressure environment.
• Able to get results through collaboration and partnership with diverse teams.
• Able to work independently.

By submitting your application, you have given your consent for us to collect, use and retain your data for a year as according to our prevailing data retention and PDPA policies. Should you have any enquiries on our data policy, please contact us at [e-mail].