Threat Hunting Analyst (AVP)

OCBC Group; Singapore; On-site; SGD 120,000 - 180,000; Full time

Benefits offered by this job

Competitive base salary

Holistic benefits

Community initiatives

Learning & development opportunities

Wellbeing & growth

Job summary

OCBC Group in Singapore invites a skilled Threat Hunting Analyst to join our Cyber Threat Intelligence team. You will proactively identify hidden threats, analyze telemetry, and collaborate with SOC, Detection Engineering, and Technology teams to strengthen our security posture.

You should have a degree in cybersecurity or related field, 8+ years in threat hunting or security operations, knowledge of MITRE ATT&CK, and hands-on experience with SIEM/EDR.

Qualifications

• Degree required in cybersecurity or related field; 8+ years in threat hunting, security operations, detection engineering or incident response.
• Strong understanding of cyber attacker TTPs and MITRE ATT&CK framework.
• Hands-on experience with SIEM, EDR, cloud security and log analysis platforms.
• Relevant certifications such as CISSP, GIAC or equivalent are advantageous.

Responsibilities

• Conduct proactive threat hunting across endpoint, network, cloud, identity and application environments.
• Develop and execute threat hunting hypotheses from threat intelligence and vulnerabilities.
• Analyze security telemetry from SIEM, EDR, cloud, identity and network security platforms.
• Investigate anomalies identified through threat hunting and assess potential impact.
• Collaborate with Detection Engineering to develop or enhance detection use cases.
• Support incident investigations with retrospective hunting and attacker behavior analysis.
• Identify security control gaps and recommend improvements to strengthen detection and response.

Skills

Threat hunting

Security operations

Incident response

Detection engineering

Log analysis

MITRE ATT&CK

Education

Degree in Cybersecurity, Information Security, Computer Science, or related discipline

Tools

SIEM

EDR

Cloud security

Log analysis tools

Job description

WHO WE ARE:

As Singapore’s longest established bank, we have been dedicated to enabling individuals and businesses to achieve their aspirations since 1932. How? By taking the time to truly understand people. From there, we provide support, services, solutions, and career paths that meet their individual needs and desires. Today, we’re on a journey of transformation. Leveraging technology and creativity to become a future-ready learning organisation. But for all that change, our strategic ambition is consistently clear and bold, which is to be Asia’s leading financial services partner for a sustainable future. We invite you to build the bank of the future. Innovate the way we deliver financial services. Work in friendly, supportive teams. Build lasting value in your community. Help people grow their assets, business, and investments. Take your learning as far as you can. Or simply enjoy a vibrant, future-ready career. Your Opportunity Starts Here.

Why Join

Protecting our customers' assets and data is at the heart of everything we do at OCBC. As a Cyber Engineer, you'll play a critical role in safeguarding our systems and networks from cyber threats. You'll be part of a team that's shaping the future of cybersecurity in the financial industry. How you succeed

How you succeed

We are seeking a skilled and motivated individual to join our Cyber Threat Intelligence team as a Threat Hunting Analyst. In this role, you will proactively identify hidden threats, suspicious activities, and security gaps across the Bank's environment. You will leverage threat intelligence, attacker TTPs, and security telemetry to uncover malicious activities that may evade existing controls, and work closely with CTI, SOC, Detection Engineering, and Technology teams to strengthen the Bank's security posture.

What you do

• Conduct proactive threat hunting across endpoint, network, cloud, identity, and application environments.
• Develop and execute threat hunting hypotheses based on threat intelligence, attacker TTPs, vulnerabilities, and emerging threats.
• Analyse security telemetry from SIEM, EDR, cloud, identity, and network security platforms to identify suspicious activities and potential security compromises.
• Investigate anomalies identified through threat hunting activities, validate findings using available telemetry, and assess their potential impact on the organisation.
• Collaborate with Detection Engineering to develop or enhance detection use cases based on threat hunting outcomes.
• Support incident investigations by performing retrospective hunting, attacker behaviour analysis, and scoping activities to assess incident impact and scope.
• Identify security control gaps and recommend improvements to strengthen detection and response capabilities.

Who you are

• Degree in Cybersecurity, Information Security, Computer Science, or related discipline.
• Minimum 8 years of experience in Threat Hunting, Security Operations, Detection Engineering, Incident Response, or related cybersecurity functions.
• Strong understanding of cyber attacker tactics, techniques, and procedures (TTPs) and the MITRE ATT&CK framework.
• Hands-on experience with SIEM, EDR, cloud security, and log analysis platforms.
• Strong analytical, investigative, and problem-solving skills.
• Experience in financial institutions or regulated environments is preferred.
• Relevant certifications such as GCIH, GCIA, GCFA, GMON, GCTI, CISSP, or equivalent are advantageous.

What we offer:

• Competitive base salary.
• A suite of holistic, flexible benefits to suit every lifestyle.
• Community initiatives.
• Industry-leading learning and professional development opportunities.
• Your wellbeing, growth and aspirations are every bit as cared for as the needs of our customers.

WHO WE ARE:

As Singapore’s longest established bank, we have been dedicated to enabling individuals and businesses to achieve their aspirations since 1932. How? By taking the time to truly understand people. From there, we provide support, services, solutions, and career paths that meet their individual needs and desires. Today, we’re on a journey of transformation. Leveraging technology and creativity to become a future-ready learning organisation. But for all that change, our strategic ambition is consistently clear and bold, which is to be Asia’s leading financial services partner for a sustainable future. We invite you to build the bank of the future. Innovate the way we deliver financial services. Work in friendly, supportive teams. Build lasting value in your community. Help people grow their assets, business, and investments. Take your learning as far as you can. Or simply enjoy a vibrant, future-ready career. Your Opportunity Starts Here.

Who we are

With a deep history in Asia, we offer the most comprehensive coverage across ASEAN and Greater China, complemented with a presence in the leading economies of New York, London and Sydney. We are the second largest financial services group in Southeast Asia by assets with one of the world’s highest credit rating (Aa1 by Moody’s and AA- by both Fitch and S&P). We offer private banking services through our wholly-owned subsidiary, Bank of Singapore, which operates on a unique open-architecture product platform to source for the best-in-class products to meet its clients’ goals. Our insurance subsidiary, Great Eastern Holdings, is the oldest and most established life insurance group in Singapore and Malaysia.