SOC Analyst - Threat Hunting & Incident Response

RED ALPHA CYBERSECURITY PTE. LTD.; Singapore; On-site; SGD 60,000 - 80,000; Full time

Job summary

RED ALPHA CYBERSECURITY PTE. LTD. in Singapore is seeking a dedicated professional to support Security Operations Centre (SOC) activities. The successful candidate will be involved in monitoring, investigation, threat hunting, and incident response, serving as a critical second line of defense.

A Degree or Diploma in Cybersecurity or IT with at least 3 years of experience in SOC operations is required. The role demands a strong grasp of attack chains and hands-on skills in incident investigation. Join us to enhance our detection capabilities and SOC processes.

Qualifications

• Degree or Diploma in Cybersecurity, IT, or related field.
• At least 3 years of experience in SOC operations or incident response (L2 preferred).
• Experience with SIEM, EDR/XDR, and cloud or identity security tools.
• Strong understanding of attack chains, MITRE ATT&CK, and threat analysis.
• Demonstrated hands-on experience in incident investigation or threat hunting.
• Ability to operate independently in a SOC environment.

Responsibilities

• Perform L2 triage and investigation of security alerts across SIEM, EDR/XDR, email, identity, network, and cloud platforms.
• Correlate events to identify root cause, scope, and impact of security incidents.
• Investigate phishing, malware, account compromise, and unauthorized access cases.
• Conduct proactive threat hunting using threat intelligence and MITRE ATT&CK.
• Support containment, remediation, and recovery activities.
• Contribute to SOC improvements (playbooks, detection tuning, onboarding of new tools).

Job description

RED ALPHA CYBERSECURITY PTE. LTD. in Singapore is seeking a dedicated professional to support Security Operations Centre (SOC) activities. The successful candidate will be involved in monitoring, investigation, threat hunting, and incident response, serving as a critical second line of defense.

A Degree or Diploma in Cybersecurity or IT with at least 3 years of experience in SOC operations is required. The role demands a strong grasp of attack chains and hands-on skills in incident investigation. Join us to enhance our detection capabilities and SOC processes.