The security analyst is responsible for analysing cybersecurity events, improving threat detection capabilities and procedures. If an event results in a security incident, the analyst will work with the relevant stakeholders to respond and contain the incident.

Key Responsibilities:

- Improving threat detection capabilities, driving lessons learn from incidents and identifying potential gaps in security controls.

- Responsible for maintaining detection capabilities for the SOC.

- Analyse large dataset and correlate information from various sources to identify the root cause to an incident.

- Enhance and drive improvements for SOC detection and response playbooks.

- Take the lead in incident response to minimize the impact of a security incident to our organization.

- Work cooperatively with various IT infrastructure team, applications and business units for the effective operations of the security.

Qualifications:

- 3 years or more relevant working experience in information security technologies.

- Understanding of the tactics, techniques and procedures of cyber advesaries.

- Insurance / Financial industry experience.

- Industry certifications CISSP, CEH, or GIAC preferred.

- Experience in Splunk preferred.

- Comfortable with analysing and processing large datasets.

- Good interpersonal and communication skills.

- Willing to learn and able to work well in a team.

The Security SOC Analystis responsible for monitoring, analyzing, and responding to security incidents in real-time within a Security Operations Center (SOC). This role involves ensuring the security and integrity of the organization's systems by identifying threats, mitigating risks, and collaborating with various teams to address vulnerabilities.

Key Responsibilities:

1. Monitoring & Threat Detection

• Continuously monitor and analyze alerts from security tools (e.g., SIEM, IDS/IPS, firewalls) to identify potential threats.
• Investigate and evaluate security incidents, determining severity and potential impact on systems.
• Escalate suspicious activities and unresolved incidents to senior analysts or response teams.

2. Incident Response

• Execute response plans for security incidents, ensuring containment, mitigation, and recovery.
• Collaborate with incident response teams to analyze, investigate, and resolve breaches or data loss events.
• Maintain detailed incident reports and documentation for accurate tracking and compliance purposes.

3. Threat Intelligence

• Leverage threat intelligence sources to identify emerging attack tactics, vulnerabilities, and trends.
• Correlate threat data across multiple systems to proactively detect potential intrusions or risks.

4. Log Analysis

• Conduct thorough analysis of security logs, network traffic, and system behaviors to detect anomalies.
• Ensure compliance with security policies and regulatory standards through effective log management.

5. Reporting & Communication

• Prepare comprehensive incident reports, detailing findings, remediation efforts, and recommendations.
• Regularly update internal stakeholders on security incidents, vulnerabilities, and ongoing risks.

6. Security Tools & Technology

• Operate and manage security infrastructure, including SIEM platforms, IDS/IPS, firewalls, antivirus, and endpoint tools.
• Stay abreast of advancements in cybersecurity technologies and recommend updates to improve SOC effectiveness.

7. Collaboration

• Work with cross-functional teams (network engineers, administrators) to strengthen security postures.
• Participate in vulnerability assessments and penetration tests, addressing identified risks proactively.

Qualifications & Requirements:

• Bachelor’s degree in Cybersecurity, IT, Computer Science, or equivalent experience.
• 1-3 years in a Security Operations Center (SOC) or similar role.
• Proficiency with SIEM tools (e.g., Splunk, QRadar, SolarWinds SIEM) and security monitoring platforms.
• Hands-on experience with incident response and investigation of threats (e.g., malware, phishing, intrusions).
• Strong knowledge of networking concepts, TCP/IP, and common protocols.

Certifications (Preferred but not required)

• Security+ (CompTIA)
• Certified SOC Analyst (CSA)
• Certified Ethical Hacker (CEH)

Technical Skills

• Deep understanding of cybersecurity principles, incident response, and forensic analysis.
• Familiarity with malware analysis techniques and vulnerability management.
• Strong analytical skills and ability to prioritize in high-pressure situations.

Soft Skills

• Effective communication for clear reporting and team interaction.
• Ability to collaborate with internal and external partners.

We're seeking a driven Security Analyst to work with a team to fortify and safeguard manufacturing environments by identifying vulnerabilities, strengthening security protocols, and fortifying our systems. You'll collaborate across teams to bolster our security posture while ensuring the integrity of sensitive data.

Responsibilities:

• Linux & AWS Security: Conduct audits and assessments specifically tailored for Linux and AWS environments, rectifying detected vulnerabilities to uphold stringent security standards.
• Collaborative Security Initiatives: Work closely with engineering teams dedicated to building, scaling, and managing manufacturing infrastructure, ensuring robust security in application services, data pipelines, and logging mechanisms.
• Monitoring and Investigation: Vigilantly monitor, analyze, and investigate security alerts within these environments, pinpointing root causes and implementing proactive measures.
• Comprehensive Audits: Conduct thorough security audits and assessments, both for cloud and manufacturing setups, enhancing the overall security posture.
• Operational Support: Provide operational assistance for security-related projects, aligning implementations with security objectives.

Requirements:

• Experience: 2+ years of hands-on experience in securing Linux or Windows/AD systems in large-scale production environments.
• Cloud Proficiency: Strong expertise in AWS cloud platforms, ideally with experience using tools like Terraform, Ansible, or Chef for configuration management.
• Tool Proficiency: Familiarity with security platforms and tools such as Wazuh, Osquery, Wireshark, Zeek, and Suricata.
• Network Security: In-depth understanding of TCP/IP fundamentals, network services, and adeptness in analyzing network and host security logs.
• Cryptography and Security Measures: Knowledge of applied cryptography principles, including PKI, SSL, and key management practices.
• Communication and Problem-Solving: Strong communication skills, adept problem-solving capabilities, and the ability to work independently.

Preferred Qualifications:

• Education: Bachelor's in Computer Science/IT/Cybersecurity or related field.
• Certifications: GIAC or related Cybersecurity Certifications are beneficial.

This is a renewable contract role.

Security Infrastructure Analyst

Main Duties

As an expert of his/her team, he/she:

• assigns technical tasks and manages delegation for technical issues,
• animates the team to encourage collaboration and sharing of best practices,
• has a role in supporting technical skills development and provides training when required,
• supports new technologies and leverages them to provide consistency of service across streams,
• manages service improvements for all Network and Security services supported throughout the organization,
• documents,reviews, maintains and shares relevant technical information to the team
• provides technical direction, supports services both proactively and reactively to maintain the availability and reliability of system infrastructure in accordance with the SLA,
• implements and develops improvements based on best practices,
• focuses on automation and optimum use of the team to improve efficiency,
• drives and delivers root cause for any high severity issue,
• reviews technology changes to identify potential risks,
• is responsible for problem management and resolution
• Perform real-time analysis and trending of security systems
• Respond to user incident reports and evaluates the type and severity of security events.
• Identify recurring security issues and risks and develops mitigation plans and recommends process improvements.
• Interpret and apply security policies and procedures.
• Establish escalation processes for security incidents and develops contingency plans and disaster recovery procedures.

As an experienced professional in Network-Security Services, he/she:

• supports his/her team during diagnosis when technical issues rise in his/her scope of expertise,
• is aware of the global IT structure so that he/she anticipates interrelationships within the organization,
• engages with technical peer, Service managers, Architect and project teams on technology roadmap and projects,
• facilitates transformation projects and suggest future directions for new areas of improvement and change,
• guarantees the production readiness and license to operate of new projects and solutions
• is available and able to drive technically, any complex or high severity incidents that occur within the scope of their role,
• actively assists in identifying the most technical skilled candidates for open roles,

Legal and Regulatory Responsibilities

• Comply with all applicable legal, regulatory and internal Compliance requirements, including, but not limited to, the Singapore Compliance manual and Compliance policies and procedures as issued from time to time;Financial Security requirements, including, but not limited to, the prevention of Financial Crime and Fraud including reporting obligations to the Money Laundering Reporting Officer.
• Maintain appropriate knowledge to ensure to be fully qualified to undertake the role. Complete all mandatory training as required to attain and maintain competence.

Qualifications and Profile

• 15+ years of Experience in managing network and security infra.
• 10+ years Experience in handling major network security projects (ex: SDWAN )
• 10+ years Experience in handling Firewalls/IPS/F5/Pulse/Proxies, Routers/Switches.
• Atleast a Bachelor’s degree in any of these faculties:
• Computer Science
• Information Technology
• Programming & Systems Analysis
• Science (Computer Studies)

Interested candidates may apply through the application system or send it to [email protected]. Shortlisted candidates will be notified.

By sending us your personal data and curriculum vitae (CV), you are deemed to consent to Morgan Mckinley Pte Ltd and its affiliates to collect, use and disclose your personal data for the purposes set out in the Privacy Policy available at https://www.morganmckinley.com/sg/privacy-policy. You acknowledge that you have read, understood, and agree with the Privacy Policy.

Morgan McKinley Pte Ltd
Dinu Dinesh

EA License No: 11C5502

EAP Registration No: R22110286

Our client, one of Asia-Pacific’s leading organizations is looking for:

Senior IT Security Analyst

Responsibilities:

• Oversee the entire incident response lifecycle from detection to resolution.
• Lead investigations of IT security incidents and ensure thorough root cause analysis and remediation.
• Develop and implement advanced threat detection and monitoring strategies.
• Utilize SIEM, EDR, and other security tools for timely incident detection.
• Prepare and present detailed reports on threat statistics to stakeholders.
• Use data visualization tools to communicate threat trends and insights.
• Evaluate and integrate new technologies to enhance security operations.
• Coordinate with internal, external stakeholders, and vendors during incidents.

Requirements:

• Degree in Information Systems, Computer Science, Cybersecurity, or a related field.
• Professional Certifications in incident handling and security analysis preferred.
• GCIH or its equivalent is preferred
• Experience in IT security, with a focus on Incident response
• Intermediate knowledge of security operations, incident analysis, incident handling, and vulnerability
• management or testing, system patching, log analysis, intrusion detection, or firewall administration
• Proficiency in Security Information and Event Management (SIEM), Endpoint Detection and Response
• (EDR), traffic and packet analysis, digital forensics, and cloud security.
• Experience in Blue/Purple teaming, firewall, Intrusion Prevention Systems (IPS), Web Application
• Firewalls (WAF) administration, virtualization, and cloud technologies.
• Knowledge and experience in Linux/Windows/Database technologies preferred.

-----------------------------------------------------------------------------------------------------

Interested applicants can also email CV at [email protected] (for faster processing, please state the exact job/position title applied “IT Security Analyst”)

Only shortlisted candidates will be notified.

-----------------------------------------------------------------------------------------------------

EA License Number: 10C3636
EA Personnel Name: Vimmi Baunthiyal
EA Personnel Registration Number: R1543982

Job responsibilities

Coordination with stakeholders relevant to new Information Security System

• Coordinate with APAC stakeholders on general planning & logistic matters (such as meeting scheduling, explaining background of the initiative and prepare meeting minutes post meeting with stakeholders)
• Coordinate with APAC stakeholders to distribute relevant documentation, survey and follow up with stakeholders on a timely manner for submission.
• Ensure completeness of documentation and/or survey submitted by the stakeholders, and conduct necessary follow-ups on any insufficient information identified.

Respond to queries from stakeholders pertaining to new Information Security System

• Observe and learn the basic functionality and workflows of new Information Security System.
• Provide thorough and timely response towards APAC stakeholders pertaining to Information Security System governance matters.
• Assist Direct Manager on Governance Operations activity such as conducting analysis on data generated from the system to identify any trends.
• Support the DLP team on end-to-end collaboration matters with all relevant stakeholders.

Others

• Continuous learning to enhance knowledge on targeted new Information System environment with guidance from Direct Manager.
• Able to grasp and understand the queries from Business users and respond rightly in a timely manner.
• Assist Direct Manager on ad-hoc basis for other DLP related matters.

Job Requirements:

• 1 to 2 years understanding and operation of Information Security relevant system. Experience in Financial service would be preferred.
• Experience in interpersonal and analytical skills attributes
• Good written and visual presentation skills (Excel, Word, PowerPoint)
• Good and thorough communication with
• Ability to work effectively in a team environment, and takes initiatives to collaborate and challenge status quo, and adaptable to embrace new changes
• Self-motivated and able to work with minimum instructions and source for information, systematically evaluate options and recommend solutions
• Degree in Information Security, Computer Engineering, Information Systems, Computer Science or equivalent
• IT professional with at least 1 to 2 years of relevant experience in IT Security, DLP relevant system and operations within the Banking and Finance industry

“This is in partnership with the Employment and Employability Institute Pte Ltd (“e2i”).

e2i is the empowering network for workers and employers seeking employment and employability solutions. e2i serves as a bridge between workers and employers, connecting with workers to offer job security through job-matching, career guidance and skills upgrading services, and partnering employers to address their manpower needs through recruitment, training, and job redesign solutions. e2i is a tripartite initiative of the National Trades Union Congress set up to support nation-wide manpower and skills upgrading initiatives. By applying for this role, you consent to A-IT Software Services Pte Ltd’s PDPA and e2i PDPA.

Summary of the Role :

The Cyber Security Analyst is responsible for safeguarding the organization’s digital assets by identifying and mitigating potential security risks, monitoring network activity for unusual behaviour, and responding to incidents. This role requires a strong understanding of security best practices, hands-on experience with various security tools, and the ability to respond quickly and effectively to emerging threats.

A key focus of this role is on the effective management and optimization of the Security Information

and Event Management (SIEM) system, ensuring it provides actionable intelligence for rapid threat response. This role will require strong analytical skills, good collaboration skills, detailed working knowledge of current and emerging security technologies, and the ability to correlate events to identify abnormal behaviour.

Responsibilities:

• Responsible to ensure accurate and rapid response to security events.
• Analyze security logs, SIEM alerts, and incident reports to identify and mitigate risks.
• Respond to and investigate security incidents, including breaches, malware outbreaks, and phishing attacks. Monitor networks and systems for security breaches, alerts, and anomalous activity.
• Conduct root-cause analysis to prevent future incidents and develop incident response procedures.
• Provide analysis and trending of security log data from various security devices.
• Configure and maintain SIEM tools to align with the organization’s security objectives and threat landscape.
• Create custom SIEM dashboards and reports for different stakeholders to visualize critical security metrics and incident data.
• Develop and optimize SIEM content, including rules, alerts, and correlation logic, to improve threat detection and response.
• Regularly review and tune SIEM rules to reduce false positives, enhance event correlation, and maintain relevance to evolving threats.
• Document and update SIEM processes and configurations, ensuring a high level of data accuracy and availability.
• Perform regular vulnerability scans and assist in patch management processes. Work with IT teams to prioritize and remediate them.
• Recommend solutions to mitigate risks in any activity that may potentially impact security of existing IT and information management
• Ensure compliance with industry regulations (e.g. GDPR, ISO 27001) and company policies.
• Assist in the development, implementation, and maintenance of security policies, standards, and guidelines.
• Assist in training staff on security best practices, including phishing awareness and data protection.
• Help develop educational materials and conduct periodic security awareness training.
• Advise and consult internal/ external customers on risk assessment, threat modelling and vulnerability management. Perform risk assessments and recommend security measures to mitigate potential risks.
• Document risks, vulnerabilities, and remediation strategies in a detailed risk management report.
• Maintain up-to-date knowledge of the IT security industry, including awareness of new or revised security solutions, improved security processes and development of new attacks and threat vectors.
• Manage and optimize security tools, such as firewalls, antivirus software, and intrusion detection/prevention systems (IDPS).
• Perform 1st level troubleshooting on servers and network issues with regards to log collection/security tools.
• Generate reports on security metrics, incidents, and remediation efforts for management.
• Maintain accurate documentation of incidents, security changes, and system configurations.
• Any other ad-hoc duties as required or assigned.

Requirements:

• Bachelor Degree or Advanced Diploma in Computer Science, Information Technology, Cybersecurity from a recognized university or related field (or equivalent experience)
• At least 1-3 years in a cybersecurity role, with hands-on experience in SIEM content management, network security, threat monitoring, or incident response.
• Strong knowledge of cybersecurity principles, practices, and technologies.
• Expertise in SIEM tools and content management, including rule creation, alert tuning, and report customization.
• Proficiency with security tools like firewalls, IDPS, antivirus, and vulnerability scanners.
• Knowledge of scripting (Python, PowerShell) for automation within the SIEM environment is a plus.
• Ability to analyze and interpret security data to identify vulnerabilities and potential threats.
• Excellent communication skills, with the ability to explain complex security concepts to non-technical stakeholders.
• Strong analytical skills and attention to detail.
• Ability to work on-call or off-hours as needed to respond to security incidents.
• May require occasional travel for training or workshop.
• Experience in the application of threat modelling or other risk identification techniques.
• Detailed knowledge of system security vulnerabilities and remediation techniques, including penetration testing and the development of exploits.
• Breadth of knowledge in information security space with emphasis on TCP/IP network security, operating system security, common attack patterns and exploitation techniques.
• Relevant certifications (e.g., CompTIA Security+, Certified Information Systems Security
• Professional (CISSP), Certified Ethical Hacker (CEH), GIAC Security Essentials (GSEC)) are a plus.
• Effective leadership skills and a team player.
• Strong sense of ownership and drive.