SOC Tier 3 Analyst (GTS - Command Centre) at Oversea Chinese Banking Corp

Singapore, Singapore, Singapore -

Full Time

Start Date

Immediate

Expiry Date

11 Sep, 26

Salary

0.0

Posted On

13 Jun, 26

Experience

10 year(s) or above

Remote Job

Yes

Telecommute

Yes

Sponsor Visa

Skills

SIEM, SOAR, EDR/XDR, Incident Response, Threat Hunting, Log Analysis, MITRE ATT&CK, Forensic Analysis, Network Security, Cloud Security, AI-assisted SOC, Technical Reporting, Vulnerability Management, UEBA, Active Directory, Cyber Defense Strategy

Industry

Banking

Description

WHO WE ARE: As Singapore’s longest established bank, we have been dedicated to enabling individuals and businesses to achieve their aspirations since 1932. How? By taking the time to truly understand people. From there, we provide support, services, solutions, and career paths that meet their individual needs and desires. Today, we’re on a journey of transformation. Leveraging technology and creativity to become a future-ready learning organisation. But for all that change, our strategic ambition is consistently clear and bold, which is to be Asia’s leading financial services partner for a sustainable future. We invite you to build the bank of the future. Innovate the way we deliver financial services. Work in friendly, supportive teams. Build lasting value in your community. Help people grow their assets, business, and investments. Take your learning as far as you can. Or simply enjoy a vibrant, future-ready career. Your Opportunity Starts Here. Why Join Protecting our customers' assets and data is at the heart of everything we do at OCBC. As a Cyber Engineering - Risk professional, you'll play a critical role in safeguarding our systems and networks from cyber threats. You'll be part of a team that's shaping the future of cybersecurity in the financial industry. How you succeed The candidate will be part of the Cyber Security Operations team and will be responsible for threat monitoring, threat response, operational enhancements and operational guidance to SOC analysts. The candidate will also act as a senior escalation point for complex and high-severity cyber threats. What you do Provide guidance to Tier 1 and Tier 2 SOC analysts. Assist in managing daily SOC operations. Collaborate with other stakeholders to support the overall cyber defence strategy. Prioritise tasks appropriately and formulate clear responses or recommendations to stakeholders in a fast-paced environment. Lead investigation of cyber security incidents and support coordinated response activities. Prepare incident summaries, technical timelines, post-incident reports and lessons-learnt documentation for technical and non-technical audiences. Develop repeatable and efficient processes, runbooks and analyst guides to monitor, detect, analyse and remediate potential cyber security incidents. Review detection effectiveness, false positives, coverage gaps and recurring alert patterns, and recommend improvements to prevention, detection and response capabilities. Support development, validation and finetuning of detection use cases, SOAR playbooks and AI-assisted SOC workflows. Optimise usage of SOC tools, including SIEM, SOAR, EDR/XDR and AI-enabled SOC platforms, and evaluate new technologies where required. Support threat hunting across security-relevant data sets based on threat intelligence, MITRE ATT&CK techniques, emerging attacker behaviours and identified control gaps. Identify opportunities where AI-assisted triage, automation or agentic workflows can safely reduce analyst effort, improve investigation consistency or accelerate response. Participate in tabletop exercises, purple team activities, detection reviews, operating reviews and post-incident retrospectives. Identify opportunities for SOC improvements, including metrics definition, after-action reviews, playbook enhancements, AI-assisted workflow improvements and analyst capability uplift. Who you are 8 or more years of experience in a SOC environment or related cybersecurity field. At least 3 years of experience as a senior SOC analyst, Tier 3 analyst, cyber incident responder, threat hunter, or equivalent escalation role. Strong hands-on experience with SOC tools such as SIEM, SOAR, EDR, XDR or UEBA. Strong proficiency in SIEM, network traffic, host event, and security event log analysis. Strong understanding of Windows, Linux, Active Directory, identity compromise, network protocols, cloud/SaaS logs, endpoint artefacts, and common attacker techniques. Experience investigating cyber threats and managing cyber security incidents, including hands-on log analysis and host/network forensic analysis in support of incident response. Experience designing, developing, deploying, and finetuning security monitoring use cases based on frameworks such as MITRE ATT&CK. Experience developing threat detection content and SIEM/SOAR use cases or playbooks. Ability to write clear technical and management-facing reports. Ability to prioritise effectively, manage competing operational demands, and make sound escalation decisions. Familiarity with AI-assisted security operations, SOC copilots, automated enrichment, agentic workflows or machine-assisted triage is a plus. Experience in banking, financial services, critical infrastructure, or highly regulated environments is a plus. Relevant certifications such as GCIH, GCIA, GCFA, GNFA, GREM, OSCP or equivalent are preferred. Who we are As Singapore's longest established bank, we have been dedicated to enabling individuals and businesses to achieve their aspirations since 1932. How? By taking the time to truly understand people. From there, we provide support, services, solutions, and career paths that meet their individual needs and desires. Today, we're on a journey of transformation. Leveraging technology and creativity to become a future-ready learning organisation. But for all that change, our strategic ambition is consistently clear and bold, which is to be Asia's leading financial services partner for a sustainable future. We invite you to build the bank of the future. Innovate the way we deliver financial services. Work in friendly, supportive teams. Build lasting value in your community. Help people grow their assets, business, and investments. Take your learning as far as you can. Or simply enjoy a vibrant, future-ready career. Your Opportunity Starts Here. What we offer: Competitive base salary. A suite of holistic, flexible benefits to suit every lifestyle. Community initiatives. Industry-leading learning and professional development opportunities. Your wellbeing, growth and aspirations are every bit as cared for as the needs of our customers. Let’s build the bank we need for the future we want. Find the best version of yourself in a friendly, supportive team. Build lasting value in your community. Help people grow their assets, business, and investments. Take your learning as far as you can. Or simply enjoy a vibrant, future-ready career. Your Opportunity Starts Here Introduce yourself to our recruiters and we'll get in touch if there's a role that seems like a good match. As the longest established Singapore bank, formed in 1932 from the merger of three local banks, we have grown from strength to strength to become a regional financial services group. With a deep history in Asia, we offer the most comprehensive coverage across ASEAN and Greater China, complemented with a presence in the leading economies of New York, London and Sydney. We are the second largest financial services group in Southeast Asia by assets with one of the world’s highest credit rating (Aa1 by Moody’s and AA- by both Fitch and S&P). We offer private banking services through our wholly-owned subsidiary, Bank of Singapore, which operates on a unique open-architecture product platform to source for the best-in-class products to meet its clients’ goals. Our insurance subsidiary, Great Eastern Holdings, is the oldest and most established life insurance group in Singapore and Malaysia.

How To Apply:

Incase you would like to apply to this job directly from the source, please click here

Responsibilities

Lead the investigation of high-severity cyber security incidents and provide operational guidance to Tier 1 and Tier 2 SOC analysts. Develop detection use cases, SOAR playbooks, and optimize SOC tools to enhance the bank's overall cyber defense capabilities.