Systems Consultant (SOC)

PERSOL SINGAPORE PTE. LTD.; Singapore; On-site; SGD 90,000 - 130,000; Full time

Job summary

PERSOL SINGAPORE PTE. LTD. is seeking a dedicated threat hunter to design and implement a comprehensive threat hunting framework across the organization.

You will build methodologies, tune detection rules and collaborate with SOC and incident response teams. You will stay current with cyber threat trends, perform in-depth analyses of actors and techniques, produce actionable reports for management, and support vulnerability management by prioritizing remediation activities.

Qualifications

• Fundamental threat hunting knowledge and security analytics.
• Understanding cyber threat methods and hacking techniques.
• Knowledge of network security best practices.
• Proficiency with Microsoft Word and Excel.
• Certs like CCNA/CCNP/CISSP are a plus.
• Willing to work beyond business hours when needed.

Responsibilities

• Develop and implement a threat hunting framework for planning and managing initiatives.
• Refine threat hunting methodologies to detect advanced threats.
• Enhance threat hunting techniques, tools and processes.
• Stay updated on vulnerabilities, trends and techniques.
• Research emerging threats and provide security recommendations.
• Conduct proactive threat hunting to identify incidents.
• Document findings and generate management reports.
• Develop and tune monitoring rules and detection signatures.
• Utilize SIEM, EDR, network analysis, vulnerability mgmt, and threat intel tools.
• Collaborate with incident response, security operations and threat intel teams.
• Develop cyber intelligence framework and integrate with SOC.
• Monitor sources to identify threats and trends.
• Analyze threat intelligence data for risks.
• Provide reports, briefings, alerts to stakeholders.
• Support during security incidents.
• Assist vulnerability management by prioritizing patches.

Skills

Threat hunting

SIEM

EDR

Threat intelligence

Vulnerability management

Incident response

Network security

Reporting

Security analytics

Tools

SIEM tools

EDR systems

Vulnerability management system

Threat intelligence platforms

Job description

Responsibilities

• Develop and implement a threat hunting framework to provide a comprehensive structure for planning, executing, and managing threat hunting initiatives.
• Develop and refine threat hunting methodologies and procedures to enhance the organization's ability to detect and respond to advanced threats
• Continuously enhance threat hunting techniques, processes, and tools to improve the organization’s overall cybersecurity posture
• Stay updated with the latest vulnerabilities, security trends, and techniques in cyber threats and hacking methodologies
• Conduct research on emerging threats and vulnerabilities and provide recommendations for enhancing the organization’s security posture
• Conduct proactive threat hunting exercises to identify and investigate potential security incidents and suspicious activities within the network.
• Document all findings, analysis, recommendations and investigation results in a clear and concise manner and generate reports for management and stakeholders
• Develop and tune security monitoring rules, correlation logic, and detection signatures
• Proficient in utilizing various security technologies, including SIEM (Security Information and Event Management) tools, network traffic analysis tools, endpoint detection and response (EDR) systems, vulnerability management system and threat intelligence platforms
• Work closely with other cybersecurity teams, such as for incident response, security operations, and threat intelligence, to share findings and collaborate on incident investigations.
• Develop and implement a cyber intelligence framework to provide a systematic and organized framework for collecting, processing, and leveraging intelligence to enhance cybersecurity posture and decision-making capabilities
• Integrate the cyber intelligence framework with the Security Operations Center (SOC) and incident response team and ensure that the intelligence gathered is effectively used to detect, prevent, and respond to cyber threats
• monitor and collect information from multiple sources, including threat intelligence feeds, security vendors, dark web forums, social media, and other online platforms, to identify emerging cyber threats and attack trends
• Analyze the collected threat intelligence data to identify patterns, trends, and potential cybersecurity risks
• Conduct in-depth analysis of threat actors, their motivations, capabilities, and tactics, and provide insights on potential risks and impacts to the organization’s systems, networks, and data.
• Produce regular and ad-hoc reports, briefings, and alerts on emerging threats, trends, and risk assessments to relevant stakeholders, including senior management, incident response teams, and other cybersecurity teams. The report shall also provide technical information in a clear and actionable format for various stakeholders
• Provide timely and accurate intelligence support during security incidents, assisting incident response teams in understanding the nature and scope of the threat, and providing guidance on containment, remediation and recovery strategies.
• Support vulnerability management efforts by analyzing threat intelligence data to identify vulnerabilities, exploit trends, and potential targets, and prioritize patching and mitigation activities

Requirements:

• Possess fundamental application security knowledge like interpretation of HTTP response status codes and WAF violations.
• Display understanding of techniques in cyber threats and hacking methodologies.
• Display understanding of network security best practices
• Fundamental skills on Microsoft Office products like Word and Excel.
• Additional certifications like CCNA, CCNP, CISSP or related certifications are a plus.
• Able to work beyond business hours including weekend when necessary