- Location
- Offsite, Singapore
- Workplace
- Onsite
- Type
- Full-time
- Department
- Operations
- Experience
- 2+ years
- Clearance
- Required
- Source
- Workday
Description
Ensign is hiring !
Working Hours: 12-hour rotating shifts (Day/Night), 24×7 operations
Job Responsibilities
- Monitor and analyse security alerts from SIEM, EDR, NDR and other security monitoring platforms.
- Perform initial investigation, triage and classification of security alerts to identify potential cyber threats and incidents.
- Escalate security incidents to Level 2 analysts and relevant stakeholders in accordance with established procedures and SLAs.
- Conduct initial incident investigation, including log analysis, threat intelligence enrichment and identification of affected systems.
- Execute pre-approved containment actions in accordance with established Standard Operating Procedures (SOPs).
- Maintain accurate incident records, investigation findings and escalation details in designated case management systems.
- Perform structured shift handovers to ensure continuity of security monitoring and incident management.
- Identify false positives and recommend improvements to detection rules, SOPs and monitoring processes.
- Support cybersecurity exercises, operational readiness activities and continuous improvement initiatives.
Job Requirements
- Singapore Citizen or Permanent Resident residing in Singapore.
- Minimum 2 years of relevant SOC operations experience.
- Hands-on experience with SIEM platforms such as Splunk, IBM QRadar, Google SecOps or equivalent.
- Familiarity with EDR, NDR and other cybersecurity monitoring tools.
- Good understanding of cybersecurity threats, incident response processes and the MITRE ATT&CK framework.
- Strong analytical, troubleshooting and incident documentation skills.
- Good written and verbal communication skills in English.
- Able to work onsite in Tampines on 12-hour rotating shifts, including weekends and public holidays.
- Must be able to obtain and maintain the required security clearance.
- Relevant cybersecurity certifications such as CompTIA Security+, GCIH, Splunk certifications or equivalent will be advantageous.
Skills
CybersecuritySIEMSOCSplunkCompTIA