SOC Security Analyst: 24/7 Threat & DLP Response

TROYTECH INTERNATIONAL CONSULTING PTE LTD; Singapore; In loco; SGD 70.000 - 110.000; Tempo pieno

Descrizione del lavoro

TROYTECH INTERNATIONAL CONSULTING PTE LTD seeks a hands-on SOC Analyst to monitor security events 24x7 using Trend Micro, Microsoft Sentinel, and related tools. You will triage alerts, perform initial containment, and contribute to DLP and vulnerability management programs.

You will collaborate with data owners, HR, and compliance teams to investigate incidents, tune detections, and document findings for audits and management reporting.

Competenze

• Diploma or Bachelor's degree in Cybersecurity, IT, Computer Science, or related field, or equivalent experience.
• 2–4 years of experience in SOC, security operations, or IT security roles.
• Hands‑on experience with SIEM tools, preferably Microsoft Sentinel, and endpoint or XDR tools, preferably Trend Micro.
• Experience using vulnerability scanners such as Tenable and managing patch processes.
• Understanding of Data Loss Prevention concepts, incident response lifecycle, and MITRE ATT&CK framework.

Mansioni

• Monitor security events 24x7 using Trend Micro, Microsoft Sentinel, and related tools.
• Triage alerts by analyzing severity and business impact to distinguish true positives.
• Investigate suspicious activities using log analysis, KQL queries, and threat intelligence.
• Escalate incidents to L2/L3 or IR teams with clear evidence for timely resolution.
• Contain incidents, isolate endpoints, or block indicators per playbooks.
• Tune detection rules and alert thresholds to reduce noise and improve accuracy.
• Monitor and triage DLP alerts for unauthorized data transfer or exfiltration.
• Investigate DLP policy violations and escalate incidents as needed.
• Review and adjust DLP policies to minimize false positives.
• Coordinate with data owners, HR, and compliance on confirmed data leakage incidents.
• Report DLP incident trends and policy effectiveness to stakeholders.
• Conduct vulnerability scans using Tenable and review results for risks.
• Prioritize vulnerabilities by CVSS, exploitability, and asset criticality.
• Raise and track remediation tickets to closure; escalate overdue items.
• Manage risk acceptance and exception requests with justification documentation.
• Produce vulnerability and patch compliance reports for management and audits.
• Document incidents in ServiceNow and maintain SOC playbooks and SOPs.
• Prepare shift handover notes and security reports for continuity.
• Support audits, compliance checks, and post-incident reviews to improve security posture.

Conoscenze

KQL queries

Incident response

Analytical thinking

Communication

Formazione

Bachelor's degree in Cybersecurity / IT / CS

Strumenti

Microsoft Sentinel

Trend Micro

Tenable

ServiceNow

Descrizione del lavoro

TROYTECH INTERNATIONAL CONSULTING PTE LTD seeks a hands-on SOC Analyst to monitor security events 24x7 using Trend Micro, Microsoft Sentinel, and related tools. You will triage alerts, perform initial containment, and contribute to DLP and vulnerability management programs.

You will collaborate with data owners, HR, and compliance teams to investigate incidents, tune detections, and document findings for audits and management reporting.