Cybersecurity Analyst - Singapore - Gcss (pte. Ltd.)

Description

About the role

The position is part of our Cyber Fusion Center's SOC team and is responsible for real time security event monitoring and security incident investigation.

Responsibilities:

. Investigate and review computer intrusions focusing on initial infection vector determination, identification of new indicators of compromise (IOC), and tactics, techniques, and procedures in support of threat detection and remediation.

. Continuously monitor security alerts queue and perform initial triage to identify any false positives and initiate improvement as necessary.

. Monitors health of security sensors and managed security infrastructure, and provide necessary support, including root cause analysis, and prepare incident reports.

. Manage ticket queue and take ownership and responsibility of tickets assigned, within agreed SLA.

. Collects data, evidence, and context necessary for Level 2 escalation.

. Works closely with Level 2 & Level 3 team towards the continuous improvement of the service.

. Ensure that daily operations and tasks are properly completed or followed up.

. Escalate issues and liaise with subject matter experts as required to resolve issues.

. Able to work in day and night rotational shift covering weekend/public holiday.

. Prepare scheduled and ad-hoc security summary report.

Candidate requirements:

. Diploma/Degree in Computer Science/Computer Engineering/Information Engineering/Cybersecurity or equivalent.

. At least 2 years of knowledge experience with security solutions and tools such as Firewall, Router, Proxy, EDR, PAM, IDS/IPS, SIEM.

. Basic understanding of common networking protocols and system infrastructure.

. Strong analytical, problem solving and interpersonal skills.

. Proficiency in one or more general-purpose programming languages (Perl, Python, PHP, Java, Yara, Regular expression etc) will be a plus.

. Relevant certification e.g., Certified Ethical Hacker (CEH) or Security+ will be a plus.

. Ability to work independently, under the general guidance.

. Working experience and knowledge on system infrastructure with interest of exploring into security domain also welcome to apply.