Senior Security Analyst - Global SOC & Incident Response

SITA; Singapore; On-site; SGD 70,000 - 90,000; Full time

Benefits offered by this job

Flex Week

Flex Day

Flex-Location

Employee Wellbeing

Professional Development

Competitive Benefits

Job summary

SITA is a global IT provider powering air travel operations. Based in Singapore with a presence across 200 countries, we empower airports, airlines, and border agencies with secure, scalable technology.

We are seeking a SOC L2 Analyst to join our Security Operations Center. You will investigate advanced security alerts, coordinate across teams, and apply MITRE ATT&CK to improve detection coverage, while mentoring junior analysts and contributing to ongoing improvements.

Qualifications

• Bachelor’s degree in IT, cybersecurity, or computer science.
• 3–5 years of experience as a SOC L2 or equivalent role.
• Industry certifications such as SC-200, GCIH, GCIA, CySA+, or ECIH.
• Experience with SIEM/EDR and incident response activities.
• Strong analytical and communication skills.

Responsibilities

• Serve as the primary escalation point for SOC Analysts during security investigations.
• Lead technical investigations of security alerts and incidents.
• Validate alert classifications, severity, scope, and escalation decisions.
• Develop and tune detection rules and SOC use cases.
• Mentor junior analysts and perform investigation quality reviews.
• Prepare investigation reports and security metrics.

Skills

SIEM & EDR/XDR

Log analysis

Investigation & IR

MITRE ATT&CK

Scripting: PowerShell/Python

Education

Bachelor’s degree in IT/Cybersecurity/CS

SC-200 / GCIH / GCIA / CySA+ / ECIH

Tools

Elastic SIEM

Cortex XDR

Defender XDR

CrowdStrike Falcon

PowerShell / Python

Job description

SITA is a global IT provider powering air travel operations. Based in Singapore with a presence across 200 countries, we empower airports, airlines, and border agencies with secure, scalable technology.

We are seeking a SOC L2 Analyst to join our Security Operations Center. You will investigate advanced security alerts, coordinate across teams, and apply MITRE ATT&CK to improve detection coverage, while mentoring junior analysts and contributing to ongoing improvements.