Ensign is hiring !

Working Hours: 12-hour rotating shifts (Day/Night), 24×7 operations

Job Responsibilities

• Monitor and analyse security alerts from SIEM, EDR, NDR and other security monitoring platforms.
• Perform initial investigation, triage and classification of security alerts to identify potential cyber threats and incidents.
• Escalate security incidents to Level 2 analysts and relevant stakeholders in accordance with established procedures and SLAs.
• Conduct initial incident investigation, including log analysis, threat intelligence enrichment and identification of affected systems.
• Execute pre-approved containment actions in accordance with established Standard Operating Procedures (SOPs).
• Maintain accurate incident records, investigation findings and escalation details in designated case management systems.
• Perform structured shift handovers to ensure continuity of security monitoring and incident management.
• Identify false positives and recommend improvements to detection rules, SOPs and monitoring processes.
• Support cybersecurity exercises, operational readiness activities and continuous improvement initiatives.

Job Requirements

• Singapore Citizen or Permanent Resident residing in Singapore.
• Minimum 2 years of relevant SOC operations experience.
• Hands-on experience with SIEM platforms such as Splunk, IBM QRadar, Google SecOps or equivalent.
• Familiarity with EDR, NDR and other cybersecurity monitoring tools.
• Good understanding of cybersecurity threats, incident response processes and the MITRE ATT&CK framework.
• Strong analytical, troubleshooting and incident documentation skills.
• Good written and verbal communication skills in English.
• Able to work onsite in Tampines on 12-hour rotating shifts, including weekends and public holidays.
• Must be able to obtain and maintain the required security clearance.
• Relevant cybersecurity certifications such as CompTIA Security+, GCIH, Splunk certifications or equivalent will be advantageous.