Threat Hunter

Ensign InfoSecurity (Singapore) Pte. Ltd.; Singapore; On-site; SGD 70,000 - 120,000; Full time

Job summary

Ensign InfoSecurity (Singapore) Pte. Ltd. is hiring a Threat Hunter to augment our security operations. The role focuses on proactive hunting across SIEM and EDR platforms, investigating alerts, and turning findings into actionable detections.

You will work full-time within a SOC team, apply advanced threat hunting methods, and present monthly reports with recommendations to strengthen the security posture of our clients. Prior certifications and 2+ years of relevant experience are preferred.

Qualifications

• Threat hunting across SIEM/EDR platforms
• Proactive threat hunts with SOC guidance
• Develop detections from hunt hypotheses
• Monthly threat hunting reporting and analysis

Responsibilities

• Perform continuous and mission-based Threat Hunting using SIEM/EDR platforms
• Support and perform threat hunts as instructed by Threat Hunting team
• Identify and propose threat hunting missions based on threat landscape
• Build hunt hypotheses, execute and analyse results, and close findings
• Create rules from hunt hypotheses for detection
• Develop and present threat hunting reports and slides monthly

Skills

Threat hunting

SIEM

EDR

Threat analysis

Education

GMON

GCTD

GCFA

GNFA

GCFR

GCTI

GCIA

OSCP

Job description

Ensign is hiring !

Responsibilities:

• Perform continuous and mission-based Threat Hunting using available platforms such as but not limited to SIEM and EDR.
• Support and perform threat hunts as instructed by Threat Hunting team
• Identify and propose possible threat hunting mission based on threat landscape
• Build hunt hypothesis, execute and analyse results, and support the entire threat hunt cycle till closure of the finding.
• Create and develop rules from the hunt hypotheses suitable for detection
• Develop and present threat hunting report and slides on a monthly basis
• Develop and present threat hunting report and slides on a monthly basis

The Threat Hunter shall:

• Work full time;
• Professional certifications such as GMON, GCTD, GCFA, GNFA, GCFR, GCTI, GCIA, OSCP or other relevant certifications will be required;
• 2 years or more of experience as a full-time SOC analyst or threat hunter or related discipline will be required;
• Operational experience performing threat hunting using the EDR, NDR and SIEM;
• Must pass the L3 technical assessment for Threat Hunting and interview conducted by a joint panel