Threat Hunting Analyst (AVP)

OCBC Bank; Singapore; On-site; SGD 120,000 - 180,000; Full time

Benefits offered by this job

Competitive salary

Flexible benefits

Community initiatives

Learning & development

Wellbeing & growth

Job summary

OCBC Bank in Singapore seeks a Senior Threat Hunting Analyst to join its Cyber Threat Intelligence team. You will proactively hunt for hidden threats, analyze telemetry, and work with CTI, SOC, and engineering teams to strengthen threat detection and response across endpoints, networks, cloud and identities.

The role requires strong MITRE ATT&CK knowledge, 8+ years in relevant cyber functions, and experience in financial institutions.

Qualifications

• Bachelor-level degree in Cybersecurity, Information Security, Computer Science, or related field.
• Minimum 8 years of experience in Threat Hunting, Security Operations, Detection Engineering, Incident Response, or related cybersecurity functions.
• Strong understanding of attacker TTPs and the MITRE ATT&CK framework.
• Hands-on experience with SIEM, EDR, cloud security, and log analysis platforms.

Responsibilities

• Conduct proactive threat hunting across endpoints, networks, cloud and applications.
• Develop and test threat hunting hypotheses using threat intel and attacker TTPs.
• Analyse telemetry from SIEM, EDR, cloud, identity and network tools to detect suspicious activity.
• Investigate anomalies, validate findings and assess potential impact.
• Collaborate with Detection Engineering to improve detection use cases.
• Support incident investigations with retrospective hunting and attacker behavior analysis.
• Identify gaps in security controls and recommend improvements.

Skills

Threat hunting

Threat intel

SIEM & EDR

MITRE ATT&CK

Analytical thinking

Financial services experience

Education

Degree in Cybersecurity/InfoSec/CS

Tools

SIEM

EDR

Cloud security

Log analysis

Job description

WHO WE ARE

As Singapore’s longest established bank, we have been dedicated to enabling individuals and businesses to achieve their aspirations since 1932. How? By taking the time to truly understand people. From there, we provide support, services, solutions, and career paths that meet their individual needs and desires. Today, we’re on a journey of transformation. Leveraging technology and creativity to become a future-ready learning organisation. But for all that change, our strategic ambition is consistently clear and bold, which is to be Asia’s leading financial services partner for a sustainable future. We invite you to build the bank of the future. Innovate the way we deliver financial services. Work in friendly, supportive teams. Build lasting value in your community. Help people grow their assets, business, and investments. Take your learning as far as you can. Or simply enjoy a vibrant, future-ready career. Your Opportunity Starts Here.

Why Join

Protecting our customers' assets and data is at the heart of everything we do at OCBC. As a Cyber Engineer, you'll play a critical role in safeguarding our systems and networks from cyber threats. You'll be part of a team that's shaping the future of cybersecurity in the financial industry.

How you succeed

We are seeking a skilled and motivated individual to join our Cyber Threat Intelligence team as a Threat Hunting Analyst. In this role, you will proactively identify hidden threats, suspicious activities, and security gaps across the Bank's environment. You will leverage threat intelligence, attacker TTPs, and security telemetry to uncover malicious activities that may evade existing controls, and work closely with CTI, SOC, Detection Engineering, and Technology teams to strengthen the Bank's security posture.

What you do

• Conduct proactive threat hunting across endpoint, network, cloud, identity, and application environments.
• Develop and execute threat hunting hypotheses based on threat intelligence, attacker TTPs, vulnerabilities, and emerging threats.
• Analyse security telemetry from SIEM, EDR, cloud, identity, and network security platforms to identify suspicious activities and potential security compromises.
• Investigate anomalies identified through threat hunting activities, validate findings using available telemetry, and assess their potential impact on the organisation.
• Collaborate with Detection Engineering to develop or enhance detection use cases based on threat hunting outcomes.
• Support incident investigations by performing retrospective hunting, attacker behaviour analysis, and scoping activities to assess incident impact and scope.
• Identify security control gaps and recommend improvements to strengthen detection and response capabilities.

Who you are

• Degree in Cybersecurity, Information Security, Computer Science, or related discipline.
• Minimum 8 years of experience in Threat Hunting, Security Operations, Detection Engineering, Incident Response, or related cybersecurity functions.
• Strong understanding of cyber attacker tactics, techniques, and procedures (TTPs) and the MITRE ATT&CK framework.
• Hands‑on experience with SIEM, EDR, cloud security, and log analysis platforms.
• Strong analytical, investigative, and problem‑solving skills.
• Experience in financial institutions or regulated environments is preferred.
• Relevant certifications such as GCIH, GCIA, GCFA, GMON, GCTI, CISSP, or equivalent are advantageous.

What we offer

• Competitive base salary.
• A suite of holistic, flexible benefits to suit every lifestyle.
• Community initiatives.
• Industry‑leading learning and professional development opportunities.
• Your wellbeing, growth and aspirations are every bit as cared for as the needs of our customers.

As the longest established Singapore bank, formed in 1932 from the merger of three local banks, we have grown from strength to strength to become a regional financial services group. With a deep history in Asia, we offer the most comprehensive coverage across ASEAN and Greater China, complemented with a presence in the leading economies of New York, London and Sydney. We are the second largest financial services group in Southeast Asia by assets with one of the world’s highest credit rating (Aa1 by Moody’s and AA- by both Fitch and S&P). We offer private banking services through our wholly‑owned subsidiary, Bank of Singapore, which operates on a unique open‑architecture product platform to source for the best‑in‑class products to meet its clients’ goals. Our insurance subsidiary, Great Eastern Holdings, is the oldest and most established life insurance group in Singapore and Malaysia.