SOC Threat Hunter & Incident Response Analyst

Red Alpha Cybersecurity; Singapore; On-site; SGD 70,000 - 110,000; Full time

Job summary

Red Alpha Cybersecurity is seeking an experienced SOC/Incident Response professional to perform L2 triage and investigation across SIEM, EDR/XDR, email, identity, network, and cloud. You will correlate events to determine root cause, scope, and impact of incidents, and investigate phishing, malware, and unauthorized access cases.

You will conduct proactive threat hunting using threat intelligence and MITRE ATT&CK, support containment and recovery, and contribute to SOC improvements including

Qualifications

• Degree or Diploma in Cybersecurity, IT, or related field.
• ≥3 years in SOC operations or incident response (L2 preferred).
• Experience with SIEM, EDR/XDR and cloud/identity security tools.
• Strong understanding of attack chains, MITRE ATT&CK, and threat analysis.
• Hands-on incident investigation or threat hunting experience.
• Ability to work independently in a SOC environment.

Responsibilities

• Perform L2 triage and investigation of security alerts across SIEM, EDR/XDR, email, identity, network, and cloud.
• Correlate events to identify root cause, scope, and impact of incidents.
• Investigate phishing, malware, account compromise, and unauthorised access cases.
• Conduct proactive threat hunting using threat intel and MITRE ATT&CK.
• Support containment, remediation, and recovery activities.
• Contribute to SOC improvements (playbooks, detection tuning, onboarding of new tools).

Skills

SOC operations

Incident response

Threat hunting

MITRE ATT&CK

Threat analysis

Cloud security

SIEM

EDR/XDR

Education

Degree or Diploma in Cybersecurity, IT, or related field

Tools

SIEM

EDR/XDR

Cloud security tools

Identity security tools

Job description

Red Alpha Cybersecurity is seeking an experienced SOC/Incident Response professional to perform L2 triage and investigation across SIEM, EDR/XDR, email, identity, network, and cloud. You will correlate events to determine root cause, scope, and impact of incidents, and investigate phishing, malware, and unauthorized access cases.

You will conduct proactive threat hunting using threat intelligence and MITRE ATT&CK, support containment and recovery, and contribute to SOC improvements including