Senior SOC Analyst & Incident Response (Remote)

SITA Group; Singapore; Hybrid; SGD 60,000 - 90,000; Full time

Benefits offered by this job

Work from home flexibility

Professional development

Diversity & Inclusion

Wellbeing programs

Job summary

SITA in Singapore is seeking a SOC L2 Analyst to join our Security Operations team. You will investigate security events, tune detections, and mentor junior analysts to uphold SOC standards.

Leverage SIEM/EDR tools (Elastic, Cortex XDR, Defender, CrowdStrike) and apply MITRE ATT&CK to strengthen detection coverage while delivering clear incident reports.

This role offers work‑from‑home flexibility, professional development, and a diverse, inclusive environment across 200 countries.

Qualifications

• Bachelor’s degree in IT/Cybersecurity/CS or related field.
• 3–5 years of experience as a SOC L2 Analyst or equivalent.
• At least one cybersecurity certification such as SC-200, GCIH, GCIA, CySA+, ECIH.

Responsibilities

• Serve as primary escalation point for SOC Analysts during security investigations.
• Lead technical investigations of security alerts and incidents.
• Validate alert classifications, severity, and escalation decisions.
• Develop and tune detection rules, correlations, and SOC use cases.
• Mentor junior analysts and perform investigation quality reviews.
• Produce technical investigation reports and security metrics.
• Provide timely updates to SOC Manager and stakeholders.

Skills

Incident investigation

SOC escalation & mentoring

Security investigations

KQL & Sigma

PowerShell/Python

MITRE ATT&CK

Analytical thinking

Communication

Education

Bachelor’s degree in IT/Cybersecurity/CS

Tools

Elastic (SIEM)

Palo Alto Cortex XDR

Microsoft Defender XDR

CrowdStrike Falcon

Job description

SITA in Singapore is seeking a SOC L2 Analyst to join our Security Operations team. You will investigate security events, tune detections, and mentor junior analysts to uphold SOC standards.

Leverage SIEM/EDR tools (Elastic, Cortex XDR, Defender, CrowdStrike) and apply MITRE ATT&CK to strengthen detection coverage while delivering clear incident reports.

This role offers work‑from‑home flexibility, professional development, and a diverse, inclusive environment across 200 countries.