Current jobs related to Mdr Analyst/ Threat Hunter - Kallang - Ensign InfoSecurity

  • Mdr Analyst

    2 days ago

    Kallang, Singapore Ensign InfoSecurity Full time

    Ensign is hiring ! - Baseline for normal operations and detect abnormalities - Perform hunt for anomalous events and investigate compromised systems. - Manage research related to threat hunting adversaries in our environments. - Participate effectively in investigations related to threat hunting adversaries in our environments - Perform Real-Time monitoring...

  • Threat Analyst

    8 hours ago

    Kallang, Singapore Ensign InfoSecurity Full time

    Ensign is hiring ! **Responsibilities**: - Monitor third party security feeds, forums, and mailing lists to gather information related to the client through automated means - Produce intelligence outputs to provide an accurate depiction of the current threat landscape and associated risk through the use of customer, community, and open source reporting -...

  • Associate SOC Analyst

    7 days ago

    Kallang, Singapore Ensign InfoSecurity Full time

    Ensign is hiring ! - Perform security monitoring, vulnerability management, data loss / policy violation prevention and threat hunting - Monitor security sensors and review logs to identify network anomalies or intrusions - Provide analysis from monitoring, research and assessment of security log data from a large number of heterogeneous security devices -...

  • Security Analyst L3

    8 hours ago

    Kallang, Singapore Ensign InfoSecurity Full time

    Ensign is hiring ! **Responsibilities**: - Setup and operating Managed Endpoint and Detection Response (MDR) program and proposing enhancement to achieve better efficiency/ effectiveness - Operating Network Traffic Analytics (NTA) program, identification of abnormalities in client’s environment - Performs threat hunting within the clients’ technology...

  • SOC Analyst

    3 days ago

    Kallang, Singapore Jobline Resources Pte Ltd Full time

    **Responsibilities**: - Responsible for working in a 24×7 IT Security Operation Centre (SOC) environment. - Identification, quantifying and tracking of cyber security incidents - Triage and management of information security events including, where necessary, participation in security incident management - Respond to inbound Change Requests (CRs), Service...

  • Associate SOC Analyst

    1 week ago

    Kallang, Singapore Ensign InfoSecurity Full time

    Ensign is hiring ! **Responsibilities**: - Assist with the development of incident response plans, workflows, and SOPs - Maintain security sensors and tools - Monitor security sensors and review logs to identify intrusions - Escalate security incidents using established policies and procedures - Perform initial analysis of security events, network traffic,...

  • Associate SOC Analyst

    1 week ago

    Kallang, Singapore Ensign InfoSecurity Full time

    Ensign is hiring ! **Duties and Responsibilities** - Assist with the development of incident response plans, workflows, and SOPs - Maintain security sensors and tools - Monitor security sensors and review logs to identify intrusions - Escalate security incidents using established policies and procedures - Perform initial analysis of security events, network...

  • Resident Engineer

    7 days ago

    Kallang, Singapore NTT DATA Full time

    **Make an impact with NTT DATA** Join a company that is pushing the boundaries of what is possible. We are renowned for our technical excellence and leading innovations, and for making a difference to our clients and society. Our workplace embraces diversity and inclusion - it’s a place where you can grow, belong and thrive. **Your day at NTT DATA** This...

Mdr Analyst/ Threat Hunter

2 weeks ago

Kallang, Singapore Ensign InfoSecurity Full time

Ensign is hiring

**Responsibilities**:

- Setup and operating Managed Endpoint and Detection Response (MDR) program and proposing enhancement to achieve better efficiency/ effectiveness
- Operating Network Traffic Analytics (NTA) program, identification of abnormalities in client’s environment
- Performs threat hunting within the clients’ technology environments to uncover indicators of threat activities
- Performs digital forensic preservation, legal documentation and electronic discovery for incidents and investigations
- Supports the development of tactics, techniques, and procedures in providing proactive threat hunting and analysis against the available information sources (e.g. Netflow, DNS and Firewall logs, etc.)
- Supports the identification and documentation of Indicators of Compromise (IoCs)
- Leverages internal and external resources to research threats, vulnerabilities and intelligence on various threat actors and exploitation tools and platforms
- Use an analytics platform to identify threats in the available information repositories
- Perform threat research to identify potential threat vectors and work with multi-disciplines to improve prevention and detection methods
- Identify gaps in an organisation’s measurement metrics, telemetry and logging capabilities and propose enhancement strategies to achieve the intended outcomes
- Work with client’s appointed Incident Response Management team for cyber security incidents such as data security breach, Advanced Persistent Threat (APT)

**Requirements**:

- Bachelor’s Degree in Computer Engineering, Computer Science, Cyber Security, Information Security or other equivalents
- 1 to 3 years of experience with threat hunting
- 1 to 3 years of experience in incident response handling
- 1 to 2 years of experience with digital forensics investigations
- Experience in consulting, including both internal and client facing experiences
- Ability to obtain a security clearance
- Ability to travel 20% of the time

Preferred Skills /Qualities
- 1 to 3 years of experience supporting or providing expert witness testimonials
- 1 to 3 years of experience in data analysis
- 1 to 3 years of experience in log analysis
- 1 to 3 years of experience in reverse malware analysis
- Experience with research, technical and business documentation and analysis
- Knowledge of the Singapore Law, Singapore Government regulations and policies
- Ability to demonstrate flexibility, initiative and innovation in dealing with ambiguous, fast-paced situations
- Ability to show proficiency in one or more regional languages and dialects
- Ability to show proficiency in Microsoft Office, Power BI and Tableau
- Ability to show proficiency in Forensic Toolkits, e.g. EnCase Forensics, FTK Forensics, Magnet Forensics and Write Blockers
- Ability to show proficiency in reverse malware engineering tools, e.g. IDA Pro
- Ability to show proficiency in programming and scripting, e.g. Java,.NET Programming, Python & PERL scripting, etc
- Possession of excellent presentation and briefing skills
- Possession of excellent oral and written communication skills
- Professional certifications, including EnCE, GCIH, GCFE, GCFA, GREM, GNFA, GASF, GCTI, CISSP, or other SANS certifications