Tier 3 CSOC Analyst, Senior

Tier 3 CSOC Analyst, Senior

Key Role:

Operate within a converged Cyber Security Operations Centre (CSOC), conducting escalated triage and incident response across both information technology (IT) and operational technology (OT) environments. Handle complex security events requiring advanced analysis and decision-making, ensuring that threats are effectively contained and remediated within hybrid systems. Serve as a technical expert during critical incidents, collaborating with IT and OT teams to address interconnected risks and vulnerabilities. Mentor and support junior CSOC analysts by providing training, sharing expertise, and reviewing their work to enhance team capabilities and performance. Contribute to developing and refining detection and response playbooks tailored to the unique requirements of IT and OT environments. Continuously monitor and analyze emerging threats to strengthen the CSOC’s detection and response strategies, leveraging frameworks such as MITRE ATT&CK. Maintain detailed documentation of incidents and remediation efforts to support compliance and post-incident reviews, ensuring alignment with IT and OT regulatory standards.

Basic Qualifications:

3+ years of experience in a SOC or cybersecurity role focusing on incident triage and response

Experience handling escalated security incidents and advanced threat analysis

Experience mentoring and training junior team members to enhance CSOC capabilities

Experience with security tools and technologies, including SIEM platforms, EDR solutions, network forensics tools, and IT- and OT-specific systems

Knowledge of CSOC workflows, detection methodologies, and response strategies tailored to IT and OT

Ability to work in Singapore without sponsorship

Bachelor’s degree in a technological field, such as Cybersecurity or Computer Science

Additional Qualifications:

Experience with frameworks such as MITRE ATT&CK and their application in IT and OT incident response

Experience with IT and OT regulatory standards and compliance requirements related to incident management

Cybersecurity Certification, such as GCIA, GCIH, GSOC, or CISSP

Commitment to Non-Discrimination

All qualified applicants will receive consideration for employment without regard to disability, status as a protected veteran or any other status protected by applicable federal, state, local, or international law.

R0211820