Singapore SOC Analyst - AI-Driven Security & Threat Hunting

Fortinet, Inc.; Singapore; On-site; SGD 60,000 - 110,000; Full time

Job summary

Fortinet, Inc. a cybersecurity pioneer, seeks an Information Security Analyst to monitor security events, identify threats, and work with customers worldwide to improve their security posture.

This highly technical role sits at the intersection of alert triage, detection engineering, and AI-augmented operations within the Fortinet-native stack. You will develop use cases and playbooks for FortiSIEM, FortiAnalyzer, and FortiSOAR, collaborate with AI agents, and help strengthen incident response

Qualifications

• Strong understanding of SOC operations, the Incident Response lifecycle, Cyber Kill Chain, threat vectors, threat intelligence, and cybersecurity frameworks (e.g. MITRE ATT&CK, NIST).
• Hands-on experience with security log analysis (AV, IPS, Anti-Spam), Linux and Windows administration, PostgreSQL, regular expressions, and security visualisation and reporting tools.
• Practical experience with network security technologies including Firewalls, SIEM, EDR, and Sandbox; Fortinet FortiSIEM/FortiAnalyzer/FortiSOAR experience is a plus.
• Aptitude for detection engineering — translate threat scenarios into structured use case logic and operationalise detections across FortiSIEM, FortiAnalyzer, and FortiSOAR.
• Comfortable working with AI agents; critically evaluate AI-generated alert summaries, enrichment, and triage recommendations, and provide structured feedback to improve them.
• Team player with strong communication; cybersecurity certifications are a bonus.

Responsibilities

• Monitor SOC alerts to detect potential threats.
• Use threat intelligence feeds, triage alerts and filter out false-positives.
• Create custom reports, dashboards, and execute log searches to support investigations and customer’s requirements.
• Work with customers and Forensic analysis team to contain and eradicate incidents if need be.
• Follow Incident Response playbooks, processes and procedures and help to improve them.
• Create/Update use case detections to detect new threats from raw logs.
• Create/Update playbooks to automate repetitive triage steps.
• Operationalise detection use cases from FortiSIEM and FortiAnalyzer into FortiSOAR, contributing to the team’s detection engineering pipeline.
• Interact with AI agents during alert triage to review and validate AI-generated alert summaries, enrichment, and contextual analysis.
• Provide structured feedback to AI agents to continuously refine alert summarisation accuracy and triage decision logic based on real-world alert patterns.

Skills

SOC operations

Incident Response

Threat intelligence

MITRE ATT&CK

NIST

Log analysis

Linux admin

Windows admin

PostgreSQL

Regular expressions

Security visualization

Reporting tools

AI collaboration

Communication

Certifications

Tools

FortiSIEM

FortiAnalyzer

FortiSOAR

Firewalls

EDR

Sandbox

SIEM

Job description

Fortinet, Inc. a cybersecurity pioneer, seeks an Information Security Analyst to monitor security events, identify threats, and work with customers worldwide to improve their security posture.

This highly technical role sits at the intersection of alert triage, detection engineering, and AI-augmented operations within the Fortinet-native stack. You will develop use cases and playbooks for FortiSIEM, FortiAnalyzer, and FortiSOAR, collaborate with AI agents, and help strengthen incident response