Senior SOC Security Analyst — MITRE & Threat Hunting

Ensign InfoSecurity; Singapore; On-site; SGD 120,000 - 160,000; Full time

Job summary

Ensign InfoSecurity is seeking a seasoned cybersecurity operations expert to monitor client environments using SIEM, investigate security alerts, and conduct IOC-based threat hunts.

You will map MITRE ATT&CK techniques to real-world incidents, produce escalation reports, and coordinate with CERTs during responses. A strong IIS/EC-Council certification and 6+ years of SOC experience are required.

Qualifications

• Degree in Computer Science, Information Security, or a related discipline.
• Minimum 6 years of experience in cybersecurity operations or SOC.
• Hands-on experience with SIEM platforms and understanding of network, Windows, and Linux infrastructure.
• Hands-on experience with EDR platforms for endpoint detection, investigation, and response.
• Ability to triage, investigate and respond to incidents independently with accurate escalation.
• Experience mapping threats to MITRE ATT&CK and IOC-based threat hunts.
• Clear written and verbal communication; able to brief senior stakeholders.
• GIAC GCIH/EC-Council ECIH or equivalent incident handling certification.

Responsibilities

• Monitor client environments using SIEM to detect, triage, and respond to cybersecurity threats per SOPs.
• Analyse and investigate security alerts; deep-dive log analysis across system and OS layers.
• Map TTPs to MITRE ATT&CK and develop plausible attack-path hypotheses.
• Produce escalation reports; manage triage workflow and improve automation playbooks.
• Conduct IOC-based threat hunts and coordinate with vendors and CERTs during incidents.
• Manage detection use cases, dashboards, and SOAR playbooks; tune detection rules and automation.
• Handle full incident ticket lifecycle from creation to closure and escalation.

Skills

SIEM operations

Threat hunting

Incident response

IOC analysis

MITRE ATT&CK mapping

Education

Bachelor in Computer Science / Information Security

Tools

SIEM platforms

EDR platforms

SOAR platforms

Job description

Ensign InfoSecurity is seeking a seasoned cybersecurity operations expert to monitor client environments using SIEM, investigate security alerts, and conduct IOC-based threat hunts.

You will map MITRE ATT&CK techniques to real-world incidents, produce escalation reports, and coordinate with CERTs during responses. A strong IIS/EC-Council certification and 6+ years of SOC experience are required.