Senior Threat Detection & Incident Response Analyst

SATS Ltd.; Singapore; On-site; SGD 90,000 - 120,000; Full time

Job summary

SATS Ltd. is seeking a skilled security operations analyst to monitor and respond to cyber threats from our Singapore hub.

You will investigate incidents, perform root cause analysis, contain threats, and coordinate with regional teams to ensure rapid remediation and continuous improvement of incident response playbooks. Responsibilities include proactive threat hunting, tuning SIEM/EDR rules, and leveraging threat intelligence to strengthen defenses across cloud, network, and on-premise

Qualifications

• Bachelor’s degree in Cybersecurity, Computer Science, Information Systems, or equivalent threat management & incident response experience.
• Must hold cybersecurity certifications such as GCIH, GCFA, GCIA, CEH, others.
• 3+ years of progressive experience in at least two of: Threat Detection & Analysis, Incident Response & Management, Threat Hunting, Cyber Threat Intelligence, Network Security, Cloud security.
• Hands-on with SIEM/EDR, incident response lifecycle, and cross-functional coordination.

Responsibilities

• Continuously monitor security consoles and dashboards (SIEM, EDR) for suspicious activity and triage alerts.
• Investigate incidents, determine scope, and perform root cause analysis.
• Contain, eradicate, and recover from incidents following the IR plan; coordinate with IT and stakeholders.
• Proactively hunt for indicators of compromise in logs, traffic, and telemetry.
• Tune detection rules and playbooks; automate responses to reduce false positives.
• Use threat intel to enrich analysis; map activities to MITRE ATT&CK for reporting.
• Collaborate with global SOC members and escalate complex incidents as needed.
• Document findings and contribute to post-incident reviews and playbooks.

Skills

Threat Detection

Incident Response

Threat Hunting

Cyber Threat Intelligence

Network Security

Cloud Security

Education

Bachelor’s degree in Cybersecurity/CS/IS

Tools

SIEM

EDR

SOAR

IDS/IPS

Job description

SATS Ltd. is seeking a skilled security operations analyst to monitor and respond to cyber threats from our Singapore hub.

You will investigate incidents, perform root cause analysis, contain threats, and coordinate with regional teams to ensure rapid remediation and continuous improvement of incident response playbooks. Responsibilities include proactive threat hunting, tuning SIEM/EDR rules, and leveraging threat intelligence to strengthen defenses across cloud, network, and on-premise