Threat Hunting Analyst (AVP)

OCBC (Singapore); Singapore; On-site; SGD 120,000 - 180,000; Full time

Job summary

OCBC Bank in Singapore invites a seasoned Cyber Threat Hunter to join the Threat Intelligence team. You will proactively hunt for hidden threats, analyze telemetry, and validate findings across endpoints, networks, and cloud environments.

You’ll collaborate with SOC, Detection Engineering, and Technology teams to strengthen detection and response capabilities. The role requires 8+ years in related cybersecurity functions, deep understanding of attacker tactics, and hands-on experience with SIEM,

Qualifications

• Bachelor's degree in Cybersecurity or related field.
• 8+ years in threat hunting, security operations, detection engineering or IR.
• Strong knowledge of attacker TTPs and MITRE ATT&CK.
• Hands-on with SIEM, EDR, cloud security, and log analysis.

Responsibilities

• Conduct proactive threat hunting across endpoints, network, cloud and identity environments.
• Develop hypotheses from threat intel, TTPs, and vulnerabilities; test them in your environment.
• Analyze telemetry from SIEM/EDR/cloud and identify suspicious activities or compromises.
• Collaborate with Detection Engineering to improve detections and playbooks.
• Support incident investigations with retrospective hunting and impact assessment.

Skills

Threat hunting

Security operations

Detection engineering

Incident response

MITRE ATT&CK

Education

Bachelor's degree in Cybersecurity

Tools

SIEM

EDR

Cloud security

Log analysis

Job description

WHO WE ARE:

As Singapore’s longest established bank, we have been dedicated to enabling individuals and businesses to achieve their aspirations since 1932. How? By taking the time to truly understand people. From there, we provide support, services, solutions, and career paths that meet their individual needs and desires.

Today, we’re on a journey of transformation. Leveraging technology and creativity to become a future-ready learning organisation. But for all that change, our strategic ambition is consistently clear and bold, which is to be Asia’s leading financial services partner for a sustainable future.

We invite you to build the bank of the future. Innovate the way we deliver financial services. Work in friendly, supportive teams. Build lasting value in your community. Help people grow their assets, business, and investments. Take your learning as far as you can. Or simply enjoy a vibrant, future-ready career.

Your Opportunity Starts Here.

Why Join

Protecting our customers' assets and data is at the heart of everything we do at OCBC. As a Cyber Engineer, you'll play a critical role in safeguarding our systems and networks from cyber threats. You'll be part of a team that's shaping the future of cybersecurity in the financial industry.

How you succeed

We are seeking a skilled and motivated individual to join our Cyber Threat Intelligence team as a Threat Hunting Analyst. In this role, you will proactively identify hidden threats, suspicious activities, and security gaps across the Bank's environment. You will leverage threat intelligence, attacker TTPs, and security telemetry to uncover malicious activities that may evade existing controls, and work closely with CTI, SOC, Detection Engineering, and Technology teams to strengthen the Bank's security posture.

What you do

• Conduct proactive threat hunting across endpoint, network, cloud, identity, and application environments.


• Develop and execute threat hunting hypotheses based on threat intelligence, attacker TTPs, vulnerabilities, and emerging threats.


• Analyse security telemetry from SIEM, EDR, cloud, identity, and network security platforms to identify suspicious activities and potential security compromises.


• Investigate anomalies identified through threat hunting activities, validate findings using available telemetry, and assess their potential impact on the organisation.


• Collaborate with Detection Engineering to develop or enhance detection use cases based on threat hunting outcomes.


• Support incident investigations by performing retrospective hunting, attacker behaviour analysis, and scoping activities to assess incident impact and scope.


• Identify security control gaps and recommend improvements to strengthen detection and response capabilities.

Who you are

• Degree in Cybersecurity, Information Security, Computer Science, or related discipline.


• Minimum 8 years of experience in Threat Hunting, Security Operations, Detection Engineering, Incident Response, or related cybersecurity functions.


• Strong understanding of cyber attacker tactics, techniques, and procedures (TTPs) and the MITRE ATT&CK framework.


• Hands-on experience with SIEM, EDR, cloud security, and log analysis platforms.


• Strong analytical, investigative, and problem-solving skills.


• Experience in financial institutions or regulated environments is preferred.


• Relevant certifications such as GCIH, GCIA, GMON, GCTI, CISSP, or equivalent are advantageous.

Who we are

As Singapore's longest established bank, we have been dedicated to enabling individuals and businesses to achieve their aspirations since 1932. How? By taking the time to truly understand people. From there, we provide support, services, solutions, and career paths that meet their individual needs and desires.

Today, we're on a journey of transformation. Leveraging technology and creativity to become a future-ready learning organisation.
But for all that change, our strategic ambition is consistently clear and bold, which is to be Asia's leading financial services partner for a sustainable future.

We invite you to build the bank of the future. Innovate the way we deliver financial services. Work in friendly, supportive teams. Build lasting value in your community. Help people grow their assets, business, and investments. Take your learning as far as you can. Or simply enjoy a vibrant, future-ready career. Your Opportunity Starts Here.

What we offer:

Competitive base salary. A suite of holistic, flexible benefits to suit every lifestyle. Community initiatives. Industry-leading learning and professional development opportunities. Your wellbeing, growth and aspirations are every bit as cared for as the needs of our customers.