SOC Analyst: Threat Detection, DLP & Remediation

Zenith Infotech Pte Ltd.; Singapore; In loco; SGD 60.000 - 100.000; Tempo pieno

Descrizione del lavoro

Zenith Infotech Pte Ltd. is seeking a Security Operations Analyst to monitor, triage, and respond to security events across endpoints, cloud, and networks. You will also cover DLP monitoring, vulnerability management, and documentation for audits.

The ideal candidate is analytical and calm under pressure, collaborating with infrastructure and application teams to drive remediation and improve security controls.

Competenze

• Diploma or Bachelors degree in Cybersecurity, IT, Computer Science, or a related field (or equivalent experience).
• 2-4 years in a SOC, security operations, or IT security role.
• Hands-on experience with a SIEM (Microsoft Sentinel preferred) and endpoint or XDR tools (Trend Micro preferred).
• Experience with vulnerability scanners (Tenable preferred) and patch management processes.
• Understanding of DLP concepts and tools, and of the incident response lifecycle and MITRE ATTFACK.

Mansioni

• Monitor alerts and dashboards across Trend Micro Vision One, Microsoft Sentinel, and other security tools.
• Triage alerts, separate true from false positives, and prioritise by severity and business impact.
• Investigate suspicious activity using log analysis, KQL queries, and threat intelligence.
• Escalate confirmed incidents to L2/L3 or the incident response team with clear evidence.
• Carry out initial containment per playbooks, such as isolating endpoints or blocking indicators.
• Tune detection rules and alert thresholds to reduce noise.
• Monitor and triage DLP alerts for unauthorised transfer, sharing, or exfiltration of sensitive data.
• Investigate policy violations, determine whether they are accidental, negligent, or malicious, and elevate as required.
• Review and tune DLP policies and rules to reduce false positives.
• Coordinate with data owners, HR, and compliance on confirmed data leakage incidents.
• Report DLP incident trends and policy effectiveness.
• Run and review vulnerability scans using Tenable and similar tools.
• Prioritise findings by severity (CVSS), exploitability, and asset criticality.
• Raise remediation tickets, track them to closure, and elevate overdue items.
• Produce vulnerability and patch compliance reports for management and audits.
• Document incidents and investigations in the ticketing system (e.g. ServiceNow).
• Maintain SOC playbooks, runbooks, and SOPs.
• Prepare shift handover notes and regular security reports.
• Support audits, compliance checks, and post-incident reviews.

Conoscenze

KQL queries

Log analysis

SIEM

XDR/EDR

Vulnerability scanning

Patch management

DLP concepts

MITRE ATT&CK

Threat detection

Cloud security

Formazione

Bachelors degree in Cybersecurity/IT/CS

Strumenti

Trend Micro Vision One

Microsoft Sentinel

Tenable

ServiceNow

Descrizione del lavoro

Zenith Infotech Pte Ltd. is seeking a Security Operations Analyst to monitor, triage, and respond to security events across endpoints, cloud, and networks. You will also cover DLP monitoring, vulnerability management, and documentation for audits.

The ideal candidate is analytical and calm under pressure, collaborating with infrastructure and application teams to drive remediation and improve security controls.