Total 3 security analyst job vacancies in 8 marina view singapore

About the role

The position is part of our Cyber Fusion Center’s SOC team and is responsible for real time security event monitoring and security incident investigation.

Job Responsibilities:

• Investigate and review computer intrusions focusing on initial infection vector determination, identification of new indicators of compromise (IOC), and tactics, techniques, and procedures in support of threat detection and remediation.
• Continuously monitor security alerts queue and perform initial triage to identify any false positives and initiate improvement as necessary.
• Monitors health of security sensors and managed security infrastructure, and provide necessary support, including root cause analysis, and prepare incident reports.
• Manage ticket queue and take ownership and responsibility of tickets assigned, within agreed SLA.
• Collects data, evidence, and context necessary for Level 2 escalation.
• Works closely with Level 2 & Level 3 team towards the continuous improvement of the service.
• Ensure that daily operations and tasks are properly completed or followed up.
• Escalate issues and liaise with subject matter experts as required to resolve issues.
• Able to work in day and night rotational shift covering weekend/public holiday.
• Prepare scheduled and ad-hoc security summary report.

Job requirements:

• Diploma/Degree in Computer Science/Computer Engineering/Information Engineering/Cybersecurity or equivalent.
• At least 2 years of knowledge experience with security solutions and tools such as Firewall, Router, Proxy, EDR, PAM, IDS/IPS, SIEM.
• Basic understanding of common networking protocols and system infrastructure.
• Strong analytical, problem solving and interpersonal skills.
• Proficiency in one or more general-purpose programming languages (Perl, Python, PHP, Java, Yara, Regular expression etc) will be a plus.
• Relevant certification e.g., Certified Ethical Hacker (CEH) or Security+ will be a plus.
• Ability to work independently, under the general guidance.
• Working experience and knowledge on system infrastructure with interest of exploring into security domain also welcome to apply.
• Fresh graduates are also welcomed to apply.

About the role

The position is part of our Cyber Fusion Center’s managed support and operations team and is responsible for day-to-day support and operations of assigned cybersecurity solutions and platforms.

Job Responsibilities:

• Provide support for assigned security platforms, including onsite troubleshooting, root cause analysis, prepare and present incident reports.
• Provide security knowledge in security architecture recommendation and perform the necessary best configuration.
• Provide collaboration efforts in assisting the SOC teams in incident investigation.
• Manage ticket queue and take ownership and responsibility of tickets assigned, within agreed SLA.
• Perform change requests activities per change window allocated, including planning, review, tracking & verification and documentation.
• Ensure that daily operations and tasks are properly completed and followed up.
• Escalate issues and liaise with subject matter experts as required to resolve issues.
• Support after-office hours activities and standby requirements as necessary.
• Support shift rotation as necessary.
• Prepare activities report and work documentation.

Job requirements:

• Educational background in Information Systems, Cybersecurity or related disciplines.
• 2-5 years of hands-on engineering, support or operations experience in Infrastructure, Network or Security Tools
• Broad understanding of systems, network infrastructure; working experience with databases, LDAP and directory services, application servers, operating systems, and network infrastructure.
• Proficiency in one or more general-purpose programming languages (Perl, Python, PHP, Shell, PowerShell, Windows Scripting, Windows console programs, .Net, Yara, Regular expression) will be a plus.
• Certificates such as ITIL Foundations, Microsoft MCSA, CISA, CISSP will be a plus.
• Ability to work independently, under the general guidance.
• Support after office hour and during weekend/public holiday.

Job Responsibilities:

• Security solution implementation (Products such as SIEM, SOAR, Threat Intel, EDR, BAS, ASM).
• Documentation for project requirements.
• Follow project implementation lifecycle.
• After sales support such as product incident escalation and technical support (24x7 SLA).
• Conduct user training and knowledge transfer session.
• Integration and customization of security solutions.
• Keen in cyber security domain.

Job requirements:

• Strong analytical, problem solving, communication and interpersonal skills.
• Computer Science/Computer Engineering/Information Engineering or equivalent discipline.
• At least 1-2 years’ experience in security system integrator environment.
• Knowledge in programming
• Basic knowledge on networking such as TCP/IP, firewall, switching and routing.
• Working knowledge on various operating system.
• Working knowledge in Database Platform.
• Basic knowledge in PCI/MAS TRM/IM8 compliance (Good to have).
• Working Knowledge in Coding/scripting (YARA-L, Python, Powershell, YAML, XML, etc).
• Basic knowledge in Cloud Services (AWS/AZURE/GCP) with knowledge on containers, stacks, Kubernetes, Dockers (Good to have).
• Senior Role will only be given to relevant experience in this field .