Senior Security Operation Center

5 days ago

Singapore Citigroup Inc. Full time
Overview

We are seeking a highly skilled and experienced Senior SOC Analyst to join our Cyber Threat team in the Security Operations Center (SOC). The Global SOC operates in a 24x7, follow the sun model and is the firm's first line of defense against evolving cyber threats, ensuring the safety and integrity of our digital assets. This role requires an individual with deep understanding of SOC processes, incident response, reviewing content/use case and security automation. As a senior analyst, the role would require coaching junior analysts in SOC and provide critical support to the management in handling cyber security incidents.

Responsibilities

  • Analyze security events to identify potential threats and intrusions. Events include but are not limited to Intrusion Detection/Prevention tools, anomaly detection systems, firewalls, antivirus and EDR systems, proxy devices, cloud security solutions and data leakage prevention systems.

  • Act as a Level 2 escalation point for incident triage, investigation, and response.

  • Perform a holistic use case review and tuning to enhance monitoring value and efficiency.

  • Develop and maintain advanced security monitoring content such as detection rules, correlation use cases, and security alerts.

  • Implement and optimize security automation to improve process efficiency and response times.

  • Lead incident response activities including root cause analysis, containment and remediation efforts.

  • Collaborate with security infrastructure teams to ensure effective integration of security technologies with operational processes.

  • Create and maintain comprehensive documentation for SOC procedures.

  • Participate in/support cyber drills, regulatory, and audit requests.

  • Provide mentorship for junior analysts within the SOC team.

  • Stay updated with the latest cybersecurity trends, emerging threats and technologies.

The above serves as a basis for understanding the type of work performed. Ad-hoc duties may be assigned as required.

Qualifications and desired qualities

  • Bachelor's degree or higher, major in Cybersecurity is a plus.

  • Certifications: GCIA, GCIH, CISSP, CISM, GSEC or similar certification preferable.

  • Strong investigative and analytical mindset with attention to details.

  • A good team player, self driven and able to act as individual contributor.

  • Consistently demonstrates clear and concise written and verbal communication.

  • Manage work relationships with peers and partners.

Work Experience

  • 8+ years of relevant experience in Cybersecurity operations.

  • Security Operations Center experience required.

  • Understand the life cycle of network threats, web attacks, attack vectors, methods of exploitation and awareness of the evolving cyber threat landscape.

  • Ability to conduct analysis utilizing various logs to identify unusual behavior that may indicate malicious activity.

  • Good understanding of computer networks, email flow, and operating system logs.

  • Experience with automation and scripting, preferably PowerShell or Python.

  • Experience with XSOAR platforms.

Job family information and related notes are provided for internal reference and are not part of the responsibilities. Citi is an equal opportunity employer, and qualified candidates will receive consideration without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, status as a protected veteran, or any other characteristic protected by law.

#J-18808-Ljbffr

  • Senior Security Operations Center

    4 days ago

    Singapore Shopee Full time

    Senior Security Operations Center (SOC) Analyst - Digital Bank Join to apply for the Senior Security Operations Center (SOC) Analyst - Digital Bank role at Shopee About the Team We aspire to make banking simple for everyone. Our digital banking services provide secure, stable, and easy-to-use banking products such as savings, payments, loans, investments and...

  • Apac Security Control Center Supervisor

    2 weeks ago

    Singapore SECURITY & RISK SOLUTIONS PTE. LTD. Full time

    We’re hiring a **Security Control Center Supervisor**to support operations at a key APAC contract. You’ll work in a fast-paced, 24/7 environment alongside a team of supervisors, specialists, and analysts to ensure smooth operations and high security standards. **Key Responsibilities**: - Supervise daily control center operations and specialist...

  • Enterprise Security Operations Center Lead

    1 week ago

    Singapore beBeeSecurity Full time $100,000 - $120,000

    Secure your career with a challenging role as an Enterprise Security Operations Center Lead.As a seasoned security professional, you will spearhead threat operations, mentor junior analysts, and drive advanced investigations within our 24/7 Security Operations Center.Key Responsibilities:Lead daily SOC shift operations, ensuring strict adherence to incident...

  • Senior Security Operations Center Specialist

    1 week ago

    Singapore beBeeSecurity Full time

    Tier 3 MSSP SOC AnalystThe Senior Security Operations Center (SOC) Specialist is a senior-level role that provides leadership for the day-to-day operations of the SOC. The position requires advanced threat hunting, incident analysis, and process optimization skills to ensure the highest level of security operations.Job ResponsibilitiesLead by example and...

  • Office Hour

    12 hours ago

    Singapore Security Xchange LLP Full time

    **Job Title** - Office Hour - Data Center Security Manager- **Job Type** - Full time**Required Position** - SS**Location** - East**Nearest MRT** - Tampines West**Job Site Type** - Data Centre**Shift** - Office Hours**Start Time** - 09:00**End Time** - 18:00**Salary** - 2700**Pay** - Gross**Payment Rate** - Monthly**Requirements**: 8 hours duty - 5 days /...

  • Data Center Security Specialist, Data Center Security

    5 days ago

    Singapore Amazon Full time

    DESCRIPTION AWS Infrastructure Services owns the design, planning, delivery, and operation of all AWS global infrastructure. In other words, we’re the people who keep the cloud running. We support all AWS data centers and all of the servers, storage, networking, power, and cooling equipment that ensure our customers have continual access to the innovation...

  • Data Center Security Operations Specialist

    2 weeks ago

    Singapore GREENLANE PRIVATE LTD. Full time

    Provide on-site security support in customer-owned or leased data centers, customer-operated warehouse spaces, and designated areas. - Conduct daily site walks, diagnose security hardware issues, and report findings for immediate escalation. - Perform inspections of critical spaces within the data center, including data halls, storage rooms, loading docks,...

  • Tiktok Data Center Security Operations

    5 days ago

    Singapore GLOBAL HR SYNERGY PTE. LTD. Full time

    **Job Description: - Work in customer’s leased or owned Data centers, Customer operated Warehouse spaces, and other areas as designated, providing on site Security support. - Hands-on involvement for assigned data center activities such as: conducting daily site walks, diagnosing security hardware issues and reporting findings for immediate escalation. -...

  • Apac Security Control Center Supervisor

    2 weeks ago

    Singapore SECURITY & RISK SOLUTIONS PTE. LTD. Full time

    **About the Position (Based in Singapore)** **Roles and Responsibilities**: - Report directly to the ASCC Manager with a dotted line reporting to the Global Security Control Center (GSCC) Manager in the United States and work in a team of other Supervisors, Specialists, a Security Systems Supervisor, and an Intel Analyst - Exercise the level of leadership,...

  • Data Center Security Specialist, Data Center Security

    5 days ago

    Singapore Amazon.com Full time

    DESCRIPTION AWS Infrastructure Services owns the design, planning, delivery, and operation of all AWS global infrastructure. In other words, we’re the people who keep the cloud running. We support all AWS data centers and all of the servers, storage, networking, power, and cooling equipment that ensure our customers have continual access to the innovation...