Threat & Incident Response Analyst

Ensign InfoSecurity; Singapore; Hybrid; SGD 60,000 - 90,000; Full time

Job summary

Ensign InfoSecurity is seeking a Threat Analyst in Singapore to lead incident response, triage alerts, and perform root cause analysis for cybersecurity incidents. The role requires analyzing logs, supporting forensic activities, and coordinating with stakeholders to contain threats promptly.

Ideal candidates have GCFE/GCFA certifications and 2+ years in incident response. Proficiency with Windows, Linux, cloud services, and container tech is a plus. Singapore Citizenship is preferred.

Qualifications

• GCFE or GCFA certifications preferred.
• 2+ years as incident response analyst or related role preferred.
• Strong analytical and communication skills essential.

Responsibilities

• Respond to security incidents with timely containment and root cause analysis.
• Triage alerts, investigate cybersecurity incidents including log and forensic analysis.
• Develop and test incident response playbooks and processes.
• Provide recommendations to tune detection use cases and SOAR playbooks.
• Maintain awareness of threat actor TTPs and current cyber security news.
• Prepare and review SOC reports for stakeholders.

Skills

Incident response

Log analysis

Threat hunting

Communication

Education

GCFE

GCFA

Tools

Windows

Linux

Cloud

Container technologies

ELK/SIEM

Job description

Ensign InfoSecurity is seeking a Threat Analyst in Singapore to lead incident response, triage alerts, and perform root cause analysis for cybersecurity incidents. The role requires analyzing logs, supporting forensic activities, and coordinating with stakeholders to contain threats promptly.

Ideal candidates have GCFE/GCFA certifications and 2+ years in incident response. Proficiency with Windows, Linux, cloud services, and container tech is a plus. Singapore Citizenship is preferred.