Threat Analyst

Ensign InfoSecurity; Singapore; On-site; SGD 60,000 - 100,000; Full time

Job summary

Ensign InfoSecurity is seeking an Incident Response Analyst to join its security operations team in Singapore. You will respond to incidents, perform root-cause analyses, triage alerts, and help contain threats across Windows and Linux environments.

The role emphasizes developing playbooks, reviewing SOC reports, and staying current with threat TTPs. The ideal candidate holds relevant certifications and 2+ years of IR experience in a fast-paced security environment.

Qualifications

• GCFE/GCFA or equivalent certifications preferred.
• 2+ years as a full-time incident response analyst or related role.
• Solid understanding of Windows and Linux OS.
• Experience analyzing network and application logs.
• Familiarity with security best practices and threat intel.

Responsibilities

• Respond to security incidents and perform root cause analysis.
• Triage alerts, investigate incidents using logs and forensics.
• Assess threats and vulnerabilities on systems and networks.
• Develop and test incident response playbooks.
• Prepare SOC reports and update stakeholders.

Skills

GCFE

GCFA

Incident response

Threat hunting

Tools

Cloud technologies

Container technologies

Log analysis tools

Job description

Responsibilities:

• Ensure timely response to security incidents, root cause analysis and closure of incident
• Triage detection alerts, investigate and respond to cybersecurity incidents that may involve log analysis, forensic analysis and incident management
• Assess cybersecurity threats and vulnerabilities
• Develop and test incident response playbooks and processes
• Provide recommendation to fine-tune detection use cases and SOAR playbooks
• Maintain situational awareness and keep current with cyber security news and threat actor Tactics, Techniques and Procedures (TTPs)
• Prepare and review SOC reports to update stakeholders

Qualification / Experience:

• Professional certifications, including GCFE, GCFA or other relevant certifications will be preferred
• Preferably 2 years or more of experience as a full-time incident response analyst or related discipline

Technical Expertise:

• Understanding of operating systems and platform (e.g. Windows, Linux)
• Knowledge of computer networking, LAN, and server
• Ability to analyse network and application logs
• Good working knowledge of Cloud and Container technologies are a plus
• Familiarity with good security practices

Other Requirements:

• Ability to work under pressure
• Demonstrate integrity, initiative, energy and endurance
• Willingness to learn
• Possess good communication and interpersonal skills
• Singapore Citizen only

About Ensign InfoSecurity

Ensign InfoSecurity is the largest pure-play cybersecurity service provider in Asia. The company is headquartered in Singapore. We specialise in the provision of these services; cybersecurity advisory and assurance, implementation and management of advanced cybersecurity controls, cybersecurity monitoring, threat hunting, and incident response. Underpinning these competencies is in-house research and development in cybersecurity. What Makes Ensign Special? We are a technology company with warmth and soul. We are ambitious, propelled by our vision to be the cyber defender of choice, and fueled by the dedication and camaraderie of individuals who are eager to make a difference, and leave their footprints in the industry. If you are a self-motivated curious go-getter, we want You! Join Us!