Cyber Security Analyst (March 2027 | SOC | Min 3-5yrs | 24/7 shift work)

Employment Type: 1-Year Contract (Renewable) Location: Braddell House, Singapore Working Hours: 24x7 (Shift Work) Performance Bonus: 1 month, depending on performance measured by the client Contract Start Date: March/April 2027 Role Summary We are looking for a Cyber Security Analyst to join a 24x7 Security Operations Center (SOC) team. The role will be responsible for security monitoring, incident investigation and response, threat detection, SIEM use-case optimization, and continuous improvement of SOC operations. Key Responsibilities Security Monitoring & Incident Response • Monitor security alerts and events in real time using SIEM, EDR, IDS/IPS and other security tools. • Triage, investigate and escalate security incidents according to defined severity levels and response procedures. • Perform detailed analysis of alerts, logs and telemetry to determine root cause, impact and remediation actions. • Execute incident response playbooks for security threats including phishing, malware, ransomware and unauthorized access. • Document investigation steps, findings and actions taken accurately in case management or ticketing systems. • Coordinate incident response activities with internal teams and external stakeholders when required. • Ensure incidents are handled according to defined SLAs, playbooks and regulatory requirements. Threat Detection & SIEM • Tune and optimize SIEM detection rules to reduce false positives and improve threat detection effectiveness. • Analyse security logs from firewalls, EDR, IDS/IPS, cloud platforms and operating systems. SOC Improvement • Contribute to the development and refinement of SOC processes, runbooks and incident response playbooks. • Identify opportunities to improve SOC efficiency through automation, SOAR and AI-driven capabilities. • Support SOC transformation and continuous improvement initiatives. Team Support • Provide guidance and knowledge sharing to junior analysts. • Act as an escalation point for complex investigations and technical challenges. • Support training and continuous skills development within the SOC team. Requirements • 3–5 years of experience in Cyber Security Operations, SOC or Incident Response roles. • Strong hands-on experience with SIEM platforms such as Splunk, Elasticsearch or Palo Alto Cortex. • Good understanding of network, endpoint, identity and cloud security concepts. • Experience analysing logs from firewalls, EDR, IDS/IPS, cloud platforms and operating systems. • Familiarity with incident response methodologies and digital forensics fundamentals. • Proven experience handling medium to high-severity security incidents independently. • Strong analytical and problem-solving skills. • Calm and structured approach when handling security incidents under pressure. • Strong sense of ownership, accountability and attention to detail. • Comfortable working in a 24x7 shift environment. Preferred Skills • Experience with SOAR platforms and security automation. • Cloud security experience with AWS, Azure or GCP. • Scripting or query skills such as SPL, KQL, SQL or Python. • Experience in SOC transformation or SIEM migration projects. • Experience working in regulated environments such as financial services, government or healthcare. • Security certifications such as GCIA, GCIH, GCED, or vendor-specific certifications from Microsoft, Splunk or Palo Alto.