Threat Hunter

Ensign InfoSecurity; Singapore; On-site; SGD 90,000 - 120,000; Full time

Job summary

Ensign InfoSecurity in Singapore is seeking a dedicated Threat Hunter to perform continuous and mission-based hunts using SIEM and EDR, supporting the Threat Hunting team and refining detections.

You will build hunt hypotheses, execute analyses, and develop monthly threat hunting reports and slides, with required certifications and a minimum of two years’ experience in SOC or threat hunting.

Qualifications

• 2+ years of experience as a full-time SOC analyst or threat hunter.
• Professional certifications such as GMON, GCTD, GCFA, GNFA, GCFR, GCTI, GCIA, OSCP or other relevant certifications will be required.
• Operational experience performing threat hunting using EDR, NDR, and SIEM.
• Must pass the L3 technical assessment for Threat Hunting and interview conducted by a joint panel.

Responsibilities

• Perform continuous and mission-based Threat Hunting using SIEM and EDR.
• Support and perform threat hunts as instructed by Threat Hunting team
• Identify and propose possible threat hunting mission based on threat landscape
• Build hunt hypotheses, execute and analyse results, and support the entire threat hunt cycle till closure of the finding.
• Create and develop rules from the hunt hypotheses suitable for detection
• Develop and present threat hunting report and slides on a monthly basis

Skills

Threat hunting

SOC analyst

EDR

NDR

SIEM

Security investigations

Tools

EDR

NDR

SIEM

Job description

Responsibilities:

• Perform continuous and mission-based Threat Hunting using available platforms such as but not limited to SIEM and EDR.
• Support and perform threat hunts as instructed by Threat Hunting team
• Identify and propose possible threat hunting mission based on threat landscape
• Build hunt hypothesis, execute and analyse results, and support the entire threat hunt cycle till closure of the finding.
• Create and develop rules from the hunt hypotheses suitable for detection
• Develop and present threat hunting report and slides on a monthly basis
• Develop and present threat hunting report and slides on a monthly basis

The Threat Hunter shall:

• Work full time;
• Professional certifications such as GMON, GCTD, GCFA, GNFA, GCFR, GCTI, GCIA, OSCP or other relevant certifications will be required;
• 2 years or more of experience as a full-time SOC analyst or threat hunter or related discipline will be required;
• Operational experience performing threat hunting using the EDR, NDR and SIEM;
• Must pass the L3 technical assessment for Threat Hunting and interview conducted by a joint panel

About Ensign InfoSecurity

Ensign InfoSecurity is the largest pure-play cybersecurity service provider in Asia. The company is headquartered in Singapore. We specialise in the provision of these services; cybersecurity advisory and assurance, implementation and management of advanced cybersecurity controls, cybersecurity monitoring, threat hunting, and incident response. Underpinning these competencies is in-house research and development in cybersecurity.

What Makes Ensign Special?

We are a technology company with warmth and soul. We are ambitious, propelled by our vision to be the cyber defender of choice, and fueled by the dedication and camaraderie of individuals who are eager to make a difference, and leave their footprints in the industry.

Join Us!