SOC Threat Detection & Incident Response Analyst

Jobline Resources Pte Ltd; Singapore; On-site; SGD 60,000 - 90,000; Full time

Job summary

Jobline Resources Pte Ltd is seeking a proactive Security Operations professional to monitor and triage alerts across Trend Micro and Microsoft Sentinel. You will investigate using log analysis and KQL, escalate incidents with evidence, and contain incidents per playbooks.

You will tune rules to reduce noise and coordinate on DLP data leakage incidents. The ideal candidate has 2–4 years in a SOC, hands-on SIEM experience, and familiarity with vulnerability scanners and patch management.

Qualifications

• 2-4 years in a SOC, security operations, or IT security role.
• Hands-on experience with a SIEM (Microsoft Sentinel preferred) and endpoint or XDR tools (Trend Micro preferred).
• Experience with vulnerability scanners (Tenable preferred) and patch management processes.
• Understanding of DLP concepts and tools, and of the incident response lifecycle and MITRE ATT&CK.
• Preferred certifications: CompTIA Security+, Microsoft SC-200, or Trend Micro certifications.
• Nice to have: CEH, GCIH, GCIA, Tenable certifications, or Azure/AWS security certifications.

Responsibilities

• Monitor alerts and dashboards across Trend Micro, Microsoft Sentinel, and other security tools; triage alerts and prioritise by severity and business impact.
• Investigate suspicious activity using log analysis, KQL queries, and threat intelligence; escalate incidents with clear evidence.
• Carry out initial containment per playbooks (e.g., isolating endpoints or blocking indicators).
• Tuning detection rules and alert thresholds to reduce noise.
• Monitor and triage DLP alerts for unauthorised transfer, sharing, or exfiltration of sensitive data; coordinate on data leakage incidents.

Skills

Network security

Endpoint security

Cloud security

OS security

KQL queries

Log analysis

Firewalls/IDS/IPS

DLP concepts

Vulnerability scanners

MITRE ATT&CK

Incident response

Remediation prioritisation

Education

Diploma or Bachelor's degree in Cybersecurity, IT, Computer Science, or related field

Tools

Microsoft Sentinel

Trend Micro

Tenable

ServiceNow

Job description

Jobline Resources Pte Ltd is seeking a proactive Security Operations professional to monitor and triage alerts across Trend Micro and Microsoft Sentinel. You will investigate using log analysis and KQL, escalate incidents with evidence, and contain incidents per playbooks.

You will tune rules to reduce noise and coordinate on DLP data leakage incidents. The ideal candidate has 2–4 years in a SOC, hands-on SIEM experience, and familiarity with vulnerability scanners and patch management.