SOC Threat Hunter & Incident Response Analyst

RED ALPHA CYBERSECURITY PTE. LTD.; Singapore; On-site; SGD 65,000 - 110,000; Full time

Job summary

RED ALPHA CYBERSECURITY PTE. LTD. is seeking an experienced SOC Analyst to support Security Operations Centre activities, including monitoring, investigation, threat hunting, and incident response.

The role acts as a second line of defence, translating alerts into actionable findings and helping to improve detection capabilities across SIEM, EDR/XDR, cloud, and identity security. You will perform L2 triage, work independently in a SOC environment, and contribute to playbooks and tooling

Qualifications

• 3+ years in SOC operations or incident response (L2 preferred).
• Experience with SIEM, EDR/XDR, and cloud/identity security tools.
• Strong understanding of MITRE ATT&CK and threat analysis.
• Hands-on incident investigation or threat hunting experience.

Responsibilities

• L2 triage and investigation of security alerts across SIEM/EDR/XDR, email, identity, network, and cloud.
• Correlate events to identify root cause, scope, and impact of incidents.
• Investigate phishing, malware, account compromise and unauthorized access.
• Threat hunting using threat intelligence and MITRE ATT&CK.
• Support containment, remediation and recovery activities.
• Contribute to SOC improvements (playbooks, detection tuning, onboarding of new tools).

Skills

SOC Operations

Incident Response

Threat Hunting

MITRE ATT&CK

SIEM

EDR/XDR

Cloud Security

Identity Security

Education

Degree or Diploma in Cybersecurity/IT

Tools

SIEM

EDR/XDR

Identity Security Tools

Job description

RED ALPHA CYBERSECURITY PTE. LTD. is seeking an experienced SOC Analyst to support Security Operations Centre activities, including monitoring, investigation, threat hunting, and incident response.

The role acts as a second line of defence, translating alerts into actionable findings and helping to improve detection capabilities across SIEM, EDR/XDR, cloud, and identity security. You will perform L2 triage, work independently in a SOC environment, and contribute to playbooks and tooling