SOC Analyst

This is a fully remote position, open to applicants in Singapore.

📋 Description

• Oversee, categorize, and assess security alerts and events from SIEM, EDR, SSE, and WAF systems.

• Conduct thorough investigations of security incidents from start to finish, covering triage, analysis, containment, eradication, and post-incident documentation.

• Collaborate with relevant teams during incident investigations.

• Assess the scope, severity, and impact of security events.

• Differentiate between true positives and false positives, escalating confirmed incidents as necessary.

• Implement response actions including isolating endpoints, blocking indicators, disabling compromised accounts, and enforcing access restrictions.

• Carry out structured shift handovers across regions using the follow-the-sun model.

• Engage in proactive threat hunting across endpoint, network, and log data.

• Align threat-hunting discoveries with frameworks such as MITRE ATT&CK.

• Provide insights on detection quality and refine SIEM correlation rules, EDR custom detections, and WAF rules.

• Enhance investigations with threat intelligence.

• Create and upkeep technical documentation, standard operating procedures, and incident response playbooks.

• Work in tandem with IT, infrastructure, application, and security engineering teams.

• Assist in vulnerability management and the ongoing enhancement of the organization's security posture.

• Report directly to the SOC Lead.

⛳️ Requirements

• Bachelor’s degree in Information Technology, Cybersecurity, Computer Science, or a related field (or equivalent practical experience).

• Minimum of 3 years of hands-on experience as a SOC Analyst, managing alerts and probing security incidents in a production setting.

• Strong working knowledge of EDR, SSE, SIEM, and WAF technologies.

• Experience in incident response and threat hunting.

• Familiarity with the MITRE ATT&CK framework.

• Comprehensive understanding of network security, endpoint security, cloud security, and Zero Trust principles.

• Practical experience in implementing, configuring, and fine-tuning security platforms or creating and refining detection content is advantageous.

• Relevant certifications such as Security+, CySA+, GCIA, GCIH, BTL1, or vendor-specific credentials are beneficial.

• Excellent analytical, troubleshooting, and problem-solving capabilities.

• High level of attention to detail.

• Ability to manage sensitive information with responsibility and security.

• Proficient written and verbal communication skills in English.

• Ability to work efficiently across technical and non-technical teams and across different time zones.

• Comfortable working autonomously in a remote, follow-the-sun team environment.

🏝️ Benefits

• Fully remote work environment.

• Global, follow-the-sun remote team structure.

• Opportunity to collaborate with international fintech professionals.

• Chance to contribute to innovative products in digital finance, blockchain, stablecoin, energy, data, and education.