Manager, IT Security

at  Singapore Technologies Engineering Ltd

Job ID: 14562
Location:ST Engineering Hub, SG
Description:
We are seeking a highly motivated and skilled Cybersecurity Analyst with Security Operations Center (SOC) experience to join our team. You will be responsible for protecting our organization’s IT infrastructure and data from cyber threats. In this role, you will leverage your expertise in Endpoint Detection and Response (EDR) tools, log management (NXLog), and security architecture to identify, analyze, and respond to security incidents within a fast-paced SOC environment. You will also play a key role in reviewing and improving our existing security posture.

QUALIFICATIONS:

• Minimum of 2-3 years of experience as a Cybersecurity Analyst, preferably within a SOC environment.
• Strong understanding of cybersecurity concepts, principles, and SOC operations.
• Experience working with EDR tools (e.g., Crowdstrike Falcon, Palo Alto Cortex XDR).
• Proficient in log management tools (e.g., NXLog, Splunk, ELK Stack).
• Experience in security architecture design and review is a strong plus.
• Excellent analytical and problem-solving skills.
• Strong communication and collaboration skills
• Ability to work independently and as part of a team in a fast-paced environment.

DESIRED SKILLS:

• Security+ or equivalent certification.
• CISSP or SANS certifications related to EDR and security architecture (preferred).
• Scripting skills (Python, PowerShell).

• Monitor and analyze security events and alerts from various sources (e.g., EDR, network security tools, SIEM) to identify potential security incidents.
• Investigate and respond to security incidents according to established SOC procedures, including escalation to senior analysts when needed.
• Leverage EDR tools (e.g., Crowdstrike Falcon, Palo Alto Cortex XDR) to investigate suspicious activity on endpoints.
• Configure and maintain NXLog for efficient log collection and analysis within the SOC workflow.
• Participate in security architecture reviews and provide recommendations for improvement based on SOC findings.
• Stay up-to-date on the latest cybersecurity threats and vulnerabilities.
• Document security incidents, findings, and remediation steps.
• Collaborate with the security team and other IT teams to ensure effective security practices.