Текст заказа
Ensign is hiring !
Working Hours: 12-hour rotating shifts (Day/Night), 24×7 operations
Job Responsibilities
* Monitor and analyse security alerts from SIEM, EDR, NDR and other security monitoring platforms.
* Perform initial investigation, triage and classification of security alerts to identify potential cyber threats and incidents.
* Escalate security incidents to Level 2 analysts and relevant stakeholders in accordance with established procedures and SLAs.
* Conduct initial incident investigation, including log analysis, threat intelligence enrichment and identification of affected systems.
* Execute pre-approved containment actions in accordance with established Standard Operating Procedures (SOPs).
* Maintain accurate incident records, investigation findings and escalation details in designated case management systems.
* Perform structured shift handovers to ensure continuity of security monitoring and incident management.
* Identify false positives and recommend improvements to detection rules, SOPs and monitoring processes.
* Support cybersecurity exercises, operational readiness activities and continuous improvement initiatives.
Job Requirements
* Singapore Citizen or Permanent Resident residing in Singapore.
* Minimum 2 years of relevant SOC operations experience.
* Hands-on experience with SIEM platforms such as Splunk, IBM QRadar, Google SecOps or equivalent.
* Familiarity with EDR, NDR and other cybersecurity monitoring tools.
* Good understanding of cybersecurity threats, incident response processes and the MITRE ATT&CK framework.
* Strong analytical, troubleshooting and incident documentation skills.
* Good written and verbal communication skills in English.
* Able to work onsite in Tampines on 12-hour rotating shifts, including weekends and public holidays.
* Must be able to obtain and maintain the required security clearance.
* Relevant cybersecurity certifications such as CompTIA Security+, GCIH, Splunk certifications or equivalent will be advantageous.