Senior SOC Investigator & Threat Hunter

CNAV BUSINESS VALUE PRIVATE LTD.; Singapore; Hybrid; SGD 60,000 - 90,000; Full time

Job summary

CNAV Business Value Private Ltd. in Singapore seeks a technically capable SOC analyst to strengthen managed security operations. The role covers hands-on investigations, threat hunting, and collaboration with AI-augmented analysts, with potential hybrid or remote work and occasional on-call shifts.

You will own incident investigations, coordinate containment, and continuously improve detection capabilities while maintaining clear client communication and well-documented SOC cases.

Qualifications

• Experience in security investigations and incident response.
• Hands-on threat hunting across networks, endpoints and cloud.
• Ability to coordinate with customers and explain technical risk clearly.

Responsibilities

• Own and investigate alerts; correlate SIEM/EDR/IDS/firewall/identity/cloud evidence to distinguish true positives.
• Establish incident chronology, affected assets, attack path, severity and impact; investigate malware, phishing and credential misuse.
• Maintain accurate SOC cases with evidence, reasoning, timelines, decisions, containment and customer communications; meet escalation and response SLAs.
• Coordinate containment, eradication and recovery with authorised personnel; remote collection within approved permissions.
• Escalate advanced forensics to L3; ensure clean handover and follow-through.
• Conduct hypothesis-led threat hunts using MITRE ATT&CK techniques, current threat intelligence, IOCs and adversary TTPs; document findings and detection gaps.
• Tune SIEM correlation rules, decoders, alert thresholds and investigation playbooks to improve signal quality and reduce repeat false positives.
• Analyse security alerts, NetFlow summaries and endpoint artefacts where available; identify suspicious communications and lateral movement.
• Validate new detection use cases with representative test data; contribute to dashboards, SOC metrics, knowledge base and continuous improvement.
• Coach junior analysts on triage, evidence collection, escalation criteria and case quality; provide structured feedback and training.
• Monitor customers' telemetry health, coverage gaps and log-ingestion failures; coordinate remediation with platform engineering.
• Investigate incidents remotely using locally retained logs and selectively retrieved evidence, recognising bandwidth, latency, connectivity and data-handling constraints.
• Prepare concise technical incident reports, management summaries and shift handovers; explain risk, recommended actions and residual uncertainty to customers.
• Work with emerging AI-assisted L3 workflows: assess AI-generated hypotheses, queries, case summaries and recommendations against source evidence; report hallucinations or unsafe proposals and require human approval for impactful actions.

Skills

Security investigations

Incident response

Threat hunting

Threat intelligence

Communication with customers

Tools

SIEM

EDR

IDS

Firewall

NetFlow

Cloud logs

Job description

CNAV Business Value Private Ltd. in Singapore seeks a technically capable SOC analyst to strengthen managed security operations. The role covers hands-on investigations, threat hunting, and collaboration with AI-augmented analysts, with potential hybrid or remote work and occasional on-call shifts.

You will own incident investigations, coordinate containment, and continuously improve detection capabilities while maintaining clear client communication and well-documented SOC cases.