SOC L1 Analyst

Company Description

The ITSEC Group is one of the leading cybersecurity groups in the Asia Pacific region, with offices in Singapore, Jakarta, Dubai, Melbourne & Bangkok. We specialize in providing comprehensive cybersecurity solutions to businesses across various industries. With a strong focus on innovation and cutting-edge technologies, we are committed to protecting our clients from evolving cyber threats.

Role Description

This is a full-time on-site role for a SOC L1 Analyst located in Singapore.

Responsibilities:

• Monitoring and analyzing security events, identifying potential threats, conducting investigations, and responding to security incidents

• Work closely with the end client SOC team to ensure the timely and effective detection, containment, and mitigation of security incidents

• Support security developments (such as evolving threats, new or enhanced security controls or changes to the technical infrastructure).

• Ensure that all Infrastructure related procedures, operation guide, architecture diagram, hardening baselines, security metrics, etc documents shall be reviewed annually or updated whenever there are changes within a month.

• Be responsible for strengthening Customer’s cyber security posture against cyber threats through vulnerability management, incident response and analysis, threat hunting and security operations.

• Manage Customer’s Cyber security operation and manage the reporting and handling of cyber security incidents.

• Perform Vulnerability Management leveraging on MVMS.

• Perform daily checks on the Endpoint Detection Response/Database Activity Monitoring dashboard for any abnormalities.

• On boarding of subscribed servers and infrastructure devices to MVMS.

• Provide supporting documents for audits.

• Perform Monthly Vulnerability Assessment, Quarterly Vulnerability Assessment for servers and network equipment.

• Work with application and infrastructure team to ensure compliance and regulatory requirements and industry standards.

Requirements:

• Diploma/degree in computer studies

• 2 years of experience working in a security operation, incident response, vulnerability management or related field.

• Demonstrated experience in network security, server security, endpoint security, web security etc.

• Strong knowledge of security principles, technologies, and industry best practices.

• Experience with log analysis, malware analysis, and network traffic analysis.

• Excellent analytical and problem-solving skills, with the ability to quickly identify and respond to security incidents, analyze complex security issues and develop effective solutions.

• Hands-on experience in security appliances such as IBM Guardium, MMVS, Carbon Black, Cyber Ark is a definite advantage.

• Experience in IT security/support operations with willingness to learn above mentioned tools are encouraged to apply. Experienced candidates will be considered for team lead role.

• Independent and capable of working in a high-pressure environment.

• Willing to work in rotational shift environment (including weekends and night shift).