Total 65 it analyst job vacancies in Legal / Public / Security category

This posting is for a contract assignment with Tundra Technical Solutions to provide services to our Client, a Fortune 500 Tech Firm.

Job Description:

The main function of the Legal Operations Analyst/ Law Enforcement Associate is to perform a variety of legal and operational duties in support of the Law Enforcement Outreach team.

Job Responsibilities:
Support the APAC Law Enforcement Outreach Team with:
- Managing escalations from law enforcement in relation to content reports
- Managing escalations from law enforcement in relation to issues with data disclosures
- Managing escalations from law enforcement in relation to hacked accounts
- Managing escalations from law enforcement in relation to verification of police accounts
- Manage inquiries from law enforcement about law enforcement issues
- Program manage internal follow-up actions with XFN arising from Enhanced Engagements with law enforcement partners
- Managing and implementing internet safety and security programs with law enforcement partners
- Engage with internal XFN teams on resolving issues of concern flagged by law enforcement partners
- Engage with internal XFN teams on improving operational workflow processes

Skills and Experience
Essential:
- Prior background working with law enforcement as well as trust and safety within the Tech Industry
- Superior data analytical skills and distilling recommendations
- Experience with metric driven processes and technology improvements
- Excellent verbal and written communication skills, problem solving skills, attention to detail and interpersonal skills.
- Strong ability to work independently, be organized, and manage one's time.
- Strong ability to create relationships with XFN teams
- Work to improve cross-functional relationships with internal teams
- Ability to multi-task and change direction quickly
- Ensure and maintain confidentiality of all appropriate communications and documentation
- Communicate daily with internal partners and externally with law enforcement contacts, while exhibiting the highest degree of professionalism, courtesy and diplomacy
- Track, prioritize, and assign all incoming written and oral communications, as necessary, to appropriate team member for response
- Prior experience at a tech company
- Experience managing operations

*This role may involve exposure to potentially graphic and/or objectionable content including but not limited to graphic images, videos and writings, offensive or derogatory language, and other potential objectionable material. I.e. child exploitation, graphic violence, animal abuse, self-injury and other content which may be considered offensive or disturbing.

This posting is for a contract assignment with Tundra Technical Solutions to provide services to our client. Please note that this is not a full-time employment opportunity. Candidates selected for this role will be engaged as contractors for the specified duration of the project.

• Vulnerability Management: Run vulnerability scans (e.g., Nessus) and analyze results.Track remediation with IT/system owners and verify patching.

• Security Tooling Implementation: Research, implement, and maintain security tools (MDM, DLP, SIEM, network monitoring, and analytics platforms). Work with IT teams to ensure integration and efficiency.

• Data Leakage Prevention: Managing & configuration of DLP, Threat Intelligence tools; monitoring and working with end-users for resolving violations.

• Incident Handling: Proactive investigate suspicious activities within IT systems and networks, identify the infected hosts and prevent them from affecting the rest of the network. Correlate and validate alerts to ensure they represent relevant security incidents.

• Cloud Security Assessments: Perform security reviews of cloud infrastructure (AWS, GCP, Azure). Identify misconfigurations, assess risks, and suggest remediations.

• Stay up-to-date with the latest security trends, vulnerabilities, and industry best practices.

• Support ISMS Team to maintain and improve the current practices by following industrial standards such as: ISO 27001 family, SOC 2, HIPAA.

KeyResponsibilities

• Assess vulnerabilities and recommend or plan patch deployments.
• Coordinate with business, application and system teams on patch decisions and schedules.
• Install updates and patches for servers, applications, and systems.
• Validate patch stability and compatibility.
• Conduct periodic scans on air-gapped systems and cloud services; coordinate penetration tests and asset inventory mapping.
• Provide weekend support for emergency patches, critical deployments, or maintenance windows.
• Track and report KPIs/KRIs on vulnerability exposure, patch compliance, and SLA adherence.
• Develop and present dashboards and technical reports for the security council and senior management.
• Prepare documentation for Change Requests and Deviations.
• Coordinate security reviews, risk assessments, and audits; implement recommendations from auditors or the security council.
• Support VM Lead in facilitating remediation meetings with system owners and stakeholders.
• Automate system and network tasks using scripting tools (e.g., PowerShell).
• Implement and utilize automation tools for pre- and post-patching tasks.

Requirements

• Bachelor’s degree in Cybersecurity, Computer Science, or related field.
• 8+ years’ experience in IT, OT, or network administration.
• Solid understanding of ISO 27001, risk assessment, network security, patch and vulnerability management.
• Troubleshooting skills for patching and firmware upgrades.

TechnicalSpecialisations

• Candidatesare expected to fulfil one or more of the following areas. Experience inmultiple areas is a plus:

• Operating Systems & Virtualization: Linux (RedHat ), Windows, vCenter, ESXi, Kubernetes.
• Database Management: MSSQL, Oracle, PostgreSQL.
• SAP Systems: Kernel, PO, support packages, SAP Notes.
• Application stacks: Java, .NET, Apache, nginx, IIS, Weblogic.
• Network Systems: Routers, switches, firewalls (ACI, Cisco, Arista, F5, Checkpoint, Palo Alto); network flows.
• VM Analyst: 3+ years in vulnerability management and 5+ years in analytics; skilled in dashboards and reporting (MS Excel, Co-Pilot, PowerBI).

We are seeking an experienced IT Security Officer (ITSO) to manage incidents, assess vulnerabilities, ensure policy compliance, and safeguard IT and network assets. The ideal candidate will work closely with internal IT teams and external vendors to uphold cybersecurity posture and compliance requirements.

Key Responsibilities:

Incident Response & Security Monitoring

• Track, manage, and escalate cybersecurity incidents and critical security threat events as required.
• Conduct information security awareness trainings to cultivate a security-conscious culture among staff.
• Stay current with emerging threats, vulnerabilities, and threat intelligence related to cloud platforms.
• Disseminate security advisories, threat intelligence reports, security directives, and patch recommendations promptly to the relevant stakeholders in the agencies.
• Partake in tabletop exercises, security risk management activities, audits and third-party assessments to enhance incident response readiness.

Security Product Management

• Perform Vulnerability Assessments (Tenable Nessus) on applications (e.g. web client/server, mobile apps), networking and computing devices (e.g. firmware, Operating System).
• Analyse vulnerability scan results, recommend remediation actions, and track resolution status.
• Monitor security events on SIEM (e.g. Splunk, Cortex, Exa beam), perform event triage and analysis.
• Perform onboarding and vulnerability scanning of computing devices before connecting to the corporate network to ensure compliance with cyber hygiene standards.

Security Governance & Compliance

• Conduct periodic security reviews to ensure adherence to IT Security Policies, Standards, Controls and industry best practices.
• Recommend and implement security initiatives and enhancement based on findings from tabletop exercises (TTX) and audits.
• Monitor and ensure compliance with secure configuration standards across network, systems and endpoint (i.e. CIS Hardening) at agencies.
• Analyse Vulnerability Assessment (VA) scan results, track and report remediation status according to the stipulated timeframe.

Network, Systems and Endpoint Security

• Manage, configure, and optimize security tools and platforms to ensure effective integration with network and IT infrastructure.
• Manage network, system, endpoint and runtime security of on-premises and cloud environments.
• Perform regular reviews of accounts for both on-premises and on cloud systems/applications.

Documentation and Reporting

• Implement and update security policies, technical baselines, Standard Operating Procedures (SOPs).
• Maintain documentation of security incidents, vulnerability assessments, security checklist, security controls and policies.
• Prepare and deliver regular reports to update security performance metrics, incident trends, compliance status and risk mitigation efforts.
• Ensure timely escalation and reporting of cybersecurity incidents to management and stakeholders.

Collaboration and Stakeholder Management

• Collaborate with various IT teams (e.g. Infrastructure, Applications, Project) and external vendors to implement and maintain security controls and measures.
• Provide security advisory and recommendations to support projects and system implementations.
• Act as the key liaison with stakeholders (e.g. SIRO/SIRM, IT, Application Teams) and cloud service providers to align security-by-design principles, cybersecurity strategies and compliance requirements.

Qualifications:

Education & Experience

• Bachelor’s degree in computer science, Information Technology, Cybersecurity, or a related discipline.
• Minimum 3 years of experience in Security Operations.

Technical Skills

• Hands-on experience with security tools (e.g. SIEM, WAF, AV, EDR, PAM, DAM).
• Deep understanding of vulnerability management, threat analysis, and incident response (IR) processes.
• Good understanding of secure network design, endpoint security, and system hardening techniques.
• Familiarity with ICT security compliance frameworks, cybersecurity standards, and risk management practices.
• Familiar with IaC security (e.g. Terraform, CloudFormation) and CI/CD security.

Certifications

• Professional certifications such as CISSP or CISM are preferred.
• Cloud certifications such as CCSP, AWS Certified Security, Azure Security Engineer Associate or equivalent would be advantageous.

Other Skills

• Strong analytical and problem-solving skills with attention to detail.
• Effective communication skills, both written and verbal, with the ability to clearly articulate security risks and recommendations.
• Ability to work independently with minimal supervision and collaboratively within a team in a dynamic and fast-paced environment.
• Proactive mindset with a continuous improvement attitude towards cybersecurity operations.

    Job Description

·      We are seeking a skilled and proactive Cyber Security Analyst to join our Security Operations Center (SOC). The ideal candidate will be responsible for real-time security monitoring, incident investigation, and response across enterprise environments.

·       This role requires strong expertise in threat detection, incident handling, and continuous improvement of SOC capabilities. 

Key Responsibilities 

·      Security Monitoring & Incident Response Monitor, investigate, and respond to medium to high-severity security incidents across network, endpoint, cloud, and application environments

·       Perform in-depth analysis of alerts, logs, and security telemetry to identify root cause, impact, and remediation actions

·       Coordinate incident response activities with internal teams and external stakeholders when required 

·      Escalate critical incidents to management as per defined protocols 

·      Ensure all incidents are handled in accordance with SLAs, playbooks, and compliance requirements 

·      Threat Detection & Use Case Management Tune and optimize SIEM detection rules to improve detection accuracy and reduce false positives

·       Analyze emerging threats and enhance detection use cases accordingly

·       Continuous Improvement & SOC Maturity Contribute to the development and enhancement of SOC processes, runbooks, and playbooks 

·      Identify opportunities for automation using SOAR and AI-driven solutions 

·      Support initiatives to improve SOC efficiency and maturity 

·      Leadership & Mentorship Provide guidance and mentoring to junior SOC analysts Act as an escalation point for complex investigations 

·      Promote knowledge sharing, training, and continuous learning within the team 

Required Skills & Experience 

·      Hands-on experience with SIEM platforms such as Splunk, Elasticsearch, Microsoft Sentinel, or Google SecOps Strong understanding of network, endpoint, identity, and cloud security concepts 

·      Experience analyzing logs from firewalls, EDR, IDS/IPS, cloud platforms, and operating systems 

·      Knowledge of incident response methodologies and digital forensics fundamentals 

·      Experience 3–5 years of experience in Cyber Security Operations, SOC, or Incident 

·      Response roles Proven ability to independently handle medium to high-severity incidents 

·      Experience working in regulated environments (financial services, healthcare, government) is an advantage 

·      Soft Skills Strong analytical and problem-solving abilities 

·      Ability to remain calm and structured under pressure High level of ownership, accountability, and attention to detail 

Preferred / Nice-to-Have 

·      Experience with SOAR platforms and security automation 

·      Cloud security expertise (AWS, Azure, GCP) Scripting/query skills (SPL, KQL, SQL, Python) 

·      Experience in SOC transformation or SIEM migration projects 

·      Certifications (Preferred) GCIA, GCIH, GCED SIEM-related certifications (Elastic, Google SecOps, Microsoft Sentinel, or equivalent)vv

​Our Client is an established and leading company in Singapore, who is seeking to recruit a Cyber Security Analyst.

KEY ROLES AND RESPONSIBILITIES

• Drive continuous improvement of Incident Response Framework, Incident Response Plan, Event Management, Standard Operation Procedure, Playbook and etc. for cybersecurity operations and incident response

• Perform advanced trend, pattern and statistical analysis to project future technical cyber threat scenarios

• Produce findings to help initialize or support law enforcement and counterintelligence investigations or activities

• Establish incident management procedures for the detection, reporting and handling of incidents

• Direct post-mortem activities following critical incidents

• Work closely with internal and external parties to manage the operation of SOC

• Manage security operation to ensure implemented security technologies and controls are effective and adequate to protect our infrastructure/business

• Track and analyse cybersecurity metrics for effectiveness, benchmarking and management reporting.

QUALIFICATIONS & EXPERIENCE

• 6 or more years of experience in running security operations including management of Security Operation Center (SOC).

• Technical know-how and experience in IT security solutions such as (but not limited to) and at least operated in more than one of the followings:-

• Network Security : F/W, IPS, VPN, UTM, NAC

• Knowledge in Checkpoint, Juniper, Cisco, Aruba and Fortigate, CyberArk, Tripwire, will be an added advantage

• Content Security : WEB Security, Anti-Spam/Anti-Virus

• End point Security : Anti-Virus/Malware, Host base IPS, DLP, BitLocker

• Security Information Management: SIEM, Security management, Forensics

• Experience in conducting detailed cyber security events investigation and analysis including leading and responding to cyber security incidents

• Relevant Cybersecurity Certifications such as CISM, CISSP, GCIH, GNFA, CCSK, CRIST will be an added advantage

JJ Consulting Services

EA Licence No.: 12C6207

Applicants are invited to send in a MS Word resume to jobs@jjconsulting.com.sg stating position applying for/present/expected salaries and earliest available date.

We thank all applicants in advance and regret that only short listed candidates will be notified.

Job Description

• Industry/ Organization Type: Security Solutions Provider
• Position Title: Security System IT Technician
• Working Location: Islandwide (office at Woodlands)
• Working Hours: 5.5 days (Mon – Fri: 9am - 6pm, Sat: 9am – 1pm)
• Salary Package: Basic + OT
• Duration: Permanent

Key Responsibilities

• Install, manage, and troubleshoot security systems: Access Control, Intercom, CCTV, NAS, VMS, and related network equipment.
• Handle copper, fibre cabling, electrical work, and installation of data/power cables, conduits, and metal trunking.
• Support testing, commissioning, and regular maintenance of security systems.
• Carry out onsite troubleshooting.
• Provide technical support, training, and engineering assistance.
• Deliver equipment and samples to project sites when needed.
• Set up and design network solutions for security systems.
• Assist Project Managers and Engineers with other tasks as needed.
• Able to standby at night or over weekends when required.

APPLY NOW!!!

• ITE/Diploma/Degree in IT, Computer, Electrical, or Electronics Engineering.
• Minimum 2 years of experience with ELV systems such as Access Control, Intercom, and CCTV.
• Strong knowledge of computer networking and troubleshooting.
• Familiar with Microsoft Windows.
• Class 3A/3 driving license is an advantage.

Kindly apply through ANY of the following methods:

• Submit your application by clicking the APPLY button;
• Email your resume to Job@anradus.com.sg. Please indicate #78602 on the email subject.

Anradus Application Policy: We value each application and ensure every resume is reviewed. Our process is efficient, typically concluding within 3 working days. If you do not receive communication from us within this timeframe, it's likely that your application has not been shortlisted by our client. In such cases, we recommend continuing your job search to maximize your opportunities.

Anradus Pte Ltd | EA License No. 20C0161 | Angel Lim | EA Reg No.: R1769781

​Our Client is an established and leading company in Singapore, who is seeking to recruit a Cyber Security Analyst.

KEY ROLES AND RESPONSIBILITIES

• Drive continuous improvement of Incident Response Framework, Incident Response Plan, Event Management, Standard Operation Procedure, Playbook and etc. for cybersecurity operations and incident response

• Perform advanced trend, pattern and statistical analysis to project future technical cyber threat scenarios

• Produce findings to help initialize or support law enforcement and counterintelligence investigations or activities

• Establish incident management procedures for the detection, reporting and handling of incidents

• Direct post-mortem activities following critical incidents

• Work closely with internal and external parties to manage the operation of SOC

• Manage security operation to ensure implemented security technologies and controls are effective and adequate to protect our infrastructure/business

• Track and analyse cybersecurity metrics for effectiveness, benchmarking and management reporting.

QUALIFICATIONS & EXPERIENCE

• 6 or more years of experience in running security operations including management of Security Operation Center (SOC).

• Technical know-how and experience in IT security solutions such as (but not limited to) and at least operated in more than one of the followings:-

• Network Security : F/W, IPS, VPN, UTM, NAC

• Knowledge in Checkpoint, Juniper, Cisco, Aruba and Fortigate, CyberArk, Tripwire, will be an added advantage

• Content Security : WEB Security, Anti-Spam/Anti-Virus

• End point Security : Anti-Virus/Malware, Host base IPS, DLP, BitLocker

• Security Information Management: SIEM, Security management, Forensics

• Experience in conducting detailed cyber security events investigation and analysis including leading and responding to cyber security incidents

• Relevant Cybersecurity Certifications such as CISM, CISSP, GCIH, GNFA, CCSK, CRIST will be an added advantage

JJ Consulting Services

EA Licence No.: 12C6207

Applicants are invited to send in a MS Word resume to jobs@jjconsulting.com.sg stating position applying for/present/expected salaries and earliest available date.

We thank all applicants in advance and regret that only short listed candidates will be notified.

We are seeking a hands-on Endpoint Security Engineer to manage, operate, and enhance enterprise endpoint protection capabilities. This role focuses on administering tools such as Symantec Endpoint Protection Manager (SEPM) and Microsoft Defender, while working closely with IT operations, security teams, and end users to protect endpoints against evolving threats.

Key Responsibilities

Endpoint Protection

• Administer, operate, and maintain endpoint security solutions (SEPM / Microsoft Defender or equivalent)
• Deploy and manage endpoint protection policies (anti-malware, IPS, firewall, device control)
• Generate regular security posture reports to identify gaps
• Manage end-to-end lifecycle of endpoint agents
• Perform upgrades and rollouts during scheduled maintenance windows

User Support & Operations

• Provide Level 2 / Level 3 support for incidents and service requests
• Monitor security alerts, investigate incidents, and perform root cause analysis

IT Service Management

• Follow ITIL processes (Incident, Problem, Change Management)
• Maintain tickets with proper documentation and resolution details
• Ensure SLA adherence and timely issue resolution

Documentation & Knowledge Management

• Create and maintain technical documentation, SOPs, and knowledge articles
• Maintain runbooks for operational tasks

Required skills and qualifications:

·       Singapore Citizens only (due to security clearance requirements)

·       Degree in Computer Science, IT, IT Security, or related field

·       2–4 years of relevant experience

·       At least 1 year of hands-on experience with SEPM / Microsoft Defender

·       Experience with Host Intrusion Prevention / Detection (HIPS / HIDS)

·       Experience in Windows and/or Linux (RedHat) administration

·       Strong multitasking ability, communication, and interpersonal skills

Preferred skills and qualifications:

·       Knowledge of Microsoft Defender is a bonus

·       Experience with scripting programming languages (e.g. PowerShell, Python) for automation

*Seeking for an IT Risk/Cyber Security talent who has minimum 3 years of experience handling Banking or Financial services IT Risk/ cyber security*

THE COMPANY
With their reputable brand and commitment to their clients, this company is increasing their operations in the region. They seek an IT Risk/Cyber Security Senior Officer to be part of their team.

JOB RESPONSIBILITIES

• Handle IT system risk framework and assessment (Outsourcing, critical and system risk assessment)
• Deal with MAS vulnerability announcement, patch management and access control
• Ensure compliance to regulations (MAS etc)
• Recommend measures to close gap and improve existing processes
• Update IT policy and guidelines
• Participate in any adhoc IT project/enhancements
• Work closely with other business stakeholders etc.

JOB REQUIREMENTS

• Degree in IT/Information Technology/Information Security/Computer Science or any other relevant IT education
• Minimum 3 years of experience handling IT Risk/Cyber security in a bank or from Financial Institutions
• Solutions-oriented, friendly, helpful, resourceful and able to multitask

If you will like to explore this opportunity, please email your resume in Microsoft Word format to marie@resolutehunter.com

We thank you for your interest and will contact shortlisted candidates for more detailed discussion.

For more job opportunities, please visit our website https://resolutehunter.com

EA Licence 18C9105
EA Reg R1105305

IT Security Manager  

Job Description

• Monitoring & closure of technology compliance matters
• Conduct gap analysis to ensure compliance with MAS and internal security group guidelines on various new technologies and latest updates issued by MAS and propose mitigating controls
• Perform technology risk & control assessments on internal processes and controls, e-banking controls, etc to ensure in compliance with the MAS guidelines and supervisory policies and internal group guidelines
• Engage with Information Security teams in Head Office for better and quick resolution of audit gaps or incidents
• Conduct risk assessment and due diligence in relation to new products/ services and outsourced activities
• Manage local IT BCP, application and infrastructure resilience and DR capabilities.
• Other responsibilities and activities as advised by the line manager

Requirements:

• With at least two years' relevant banking experience in technology risk management, information security, cyber security consultancy or IT Audit field
• Familiar with technology risk and cyber security regulatory requirements, including but not limited to those defined by MAS
• Cybersecurity certification such as CISSP, CRISC, CISA, CISM, etc. is prefered

Job Purpose
This role leads the Governance, Risk, and Compliance functions. The role ensures that security controls are well‑designed, risks are understood and managed, and the company maintains compliance with industry, customer, and regulatory requirements. This leader partners closely with IT, operations, legal, procurement, and third‑party partners to embed security into daily business processes.

Roles and Responsibilities
IT Security Governance and Policy Management

• Develop, maintain, and enforce security policies, standards,and procedures aligned with business needs and regulatory requirements.
• Establish a governance framework that integrates security intologistics operations, including forwarding systems, warehouse systems, transportation management systems, fleet technologies, IoT devices, and corporate applications.
• Lead security awareness programs tailored to both office and field personnel.

Risk Management

• Own the enterprise security risk management program, including risk identification, assessment, scoring, treatment planning, and reporting.
• Conduct regular risk assessments and maintain the risk register.
• Plan, manage and report mitigation actions.
• Define risk responses (Mitigate/Transfer/Accept) and manage treatment plans.
• Monitor Key Risk Indicators (KRIs) and analyze risk trends.
• Prepare risk heatmaps and executive risk reports.
• Support customer/regulatory assessments with risk documentation.
• Monitor emerging threats and regulatory changes affecting supply chain and logistics operations.

Compliance and Audit

• Manage compliance with frameworks such as ISO 27001, SOC 2,NIST CSF, GDPR, PDPA, CTPAT, PCI DSS (if applicable), and customer‑mandated security requirements.
• Manage internal and external audits, ensuring evidencereadiness and timely remediation of findings.
• Maintain compliance documentation repositories, controllibraries, and audit trails to ensure regulatory adherence.
• Evaluate regulatory changes and update internal policies.
• Support incident response ensuring compliance obligations.
• Coordinate evidence collection for customer/governmentassessments.

Third Party and Vendor Security

• Lead the third‑party risk management program, including duediligence, contract reviews, and ongoing monitoring.
• Evaluate security posture of logistics partners, carriers, technology vendors, and SaaS providers.
• Work with procurement and legal to embed security requirements into vendor agreements.
• Conduct third‑party security risk assessments.

Incident Preparedness and Response Governance

• Develop and maintain incident response plans, playbooks, andcommunication protocols and ensure compliance.
• Coordinate tabletop exercises with IT, operations, and executive leadership.
• Ensure post‑incident reviews translate into updated controls and governance improvements.

Control Design and Assurance

• Oversee the design, implementation, and testing of security controls across IT and operational technology environments.
• Partner with infrastructure, application, and operations teams to ensure controls are practical and effective in high availability logistics environments.
• Track control performance metrics and drive continuous improvement.

Reporting and Stakeholder Engagement

• Deliver regular reports to executive leadership on risk posture, compliance status, and key initiatives.
• Serve as the primary point of contact for customer security questionnaires and supply chain security assessments.
• Communicate complex security topics in clear, business aligned language.

Requirements

• Bachelor’s degree in information security, Computer Science or related discipline.
• Certifications preferred: CISSP, CISM, CRISC, CISA.
• 7+ years in IT Security, GRC or related roles.
• Strong understanding of security frameworks (ISO 27001, NIST CSF, SOC2).
• Knowledge of data privacy regulations (GDPR, PDPA) and cross-border logistics considerations.
• Experience managing audits, compliance programs, and risk assessments.
• Familiarity with logistics & supply chain environments.
• Ability to collaborate with cross‑functional teams and influence without authority.
• Excellent communication, documentation, and stakeholder‑management skills.

We are seeking an experienced IT Security Engineer with strong expertise in web proxy technologies, including Squid Proxy, Bluecoat (Symantec) ProxySG, and Zscaler Internet Access (ZIA). The engineer will be responsible for designing, implementing, and managing secure web access solutions while supporting enterprise security policies, threat protection, and compliance requirements.

Key Responsibilities

Proxy Infrastructure Management

• Deploy, configure, and maintain Squid Proxy, Bluecoat ProxySG, and Zscaler ZIA solutions.
• Optimize proxy performance, caching, load-balancing, and traffic routing.
• Develop rules, policies, and filters for secure web access control.

Security Operations

• Monitor and analyze web traffic logs to detect anomalies, threats, or policy violations.
• Investigate proxy-related security incidents and provide remediation.
• Implement URL filtering, SSL inspection, DLP controls, and threat prevention mechanisms.

Technology Integration

• Integrate proxy solutions with authentication systems (LDAP, AD, SAML).
• Collaborate with Network, SOC, and Cloud teams to support security controls across hybrid environments.
• Support integration with SIEM platforms for log forwarding and analytics.

Policy & Governance

• Maintain security configuration baselines, documentation, and SOPs.
• Ensure compliance with regulatory requirements (e.g., ISO 27001, MAS TRM, GDPR).
• Support periodic audits and risk assessments.

Troubleshooting & Support

• Provide Level 2/3 support for proxy-related issues.
• Troubleshoot connectivity, performance, and access control issues across distributed environments.
• Work with vendors (e.g., Broadcom, Zscaler) for escalated support cases.

Required Skills & Experience

• 3–8 years of experience in IT Security, Network Security, or related roles.
• CCIE Certification is preferred.
• Hands-on expertise with Squid Proxy, Bluecoat ProxySG/ASG, and Zscaler ZIA.
• Strong understanding of: Web protocols (HTTP/HTTPS)SSL/TLS inspection Web filtering & threat protection Networking fundamentals (TCP/IP, DNS, routing)
• Experience with enterprise logging, SIEM integration, and security monitoring.
• Familiarity with Linux environments (for Squid).
• Strong analytical and problem‑solving skills.
• 24/7 Rotating shift and on call support is required for this role.

●As a Level 2 Cyber Defense Operations Center (CDOC) Senior Analyst, you will work in advanced security operations with a focus on SIEM and SOAR technologies, driving detection and response. You’ll be responsible for helping L3 in optimizing detection rules and managing high-severity incidents from triage to resolution.

● Your primary responsibility will be helping Level 1 analyst in analysis of incidents and assisting Level 3 on day-to-day operation.

● This role requires medium level technical expertise, team player quality, and a proactive approach to evolving threats.

Qualifications & Experience

●Bachelor's degree in computer science, Information Technology, Cybersecurity, or a related field. A Master's degree or relevant certifications (e.g., SANS/GIAC, ECIH, GCIH, CEH, DFIR) may be preferred.

●4-7 years of total experience in SOC in a large multi-national organization or in a known MSSP. In addition, candidate should possess at least 2 years of working experience on SOAR solutions.

Responsibilities

●Run daily SOC operations including SIEM/SOAR tuning, alert triage, and coordinated incident response to ensure effective real-time threat monitoring.

●Handlle end-to-end security incident analysis, containment, mitigation, and reporting, leveraging SIEM/SOAR insights and cross-team coordination for swift resolution.

●Work on high priority incidents or escalated incidents from L1

●Assist L3 in any adhoc investigation, fine-tuning security solution.

●Continuously enhance SIEM/SOAR/XDR alert use cases and threat detection capabilities.

●Research emerging threats, vulnerabilities, and attack techniques to improve defenses.

●Document incident response activities and produce detailed reports for stakeholders.

●Conduct post-incident reviews to drive improvements in tools, processes, and readiness.

●Maintain detailed incident records, contribute to reporting, and support audit readiness.

●Guide and train junior analysts, promoting best practices and continuous improvement within the SOC.

●Stay up to date on emerging threats and technologies to continuously evolve SOC capabilities.

●Support comprehensive asset inventory and ownership mapping to ensure full monitoring coverage.

Technical & Soft Skills:

●Deep hands-on experience with technologies like SIEM, SOAR, XDR such as Google Chronicle, Crowdstrike Logscale, Splunk.

●Strong working knowledge of endpoint security tools and concepts, including EDR (CrowdStrike, Defender, Cortex), DLP, and MDM.

●Strong knowledge of MITRE ATT&CK, NIST CSF frameworks, and cyber kill chain concepts.

●Good understanding of network security, operating systems, and hybrid cloud environments (Cloud, On-Prem, VDI).

●In-depth knowledge of threat landscapes and technical security concepts.

●Strong grasp of network protocols, OS internals, and security technologies.

●Familiar with compliance standards such as NIST CSF and ISO 27001.

●Ability to work under pressure, especially during critical security incidents.

●Ability to conduct independent research and analysis, identifying issues, formulating options, and making conclusions and recommendations.

●Skilled in developing professional documentation and detailed reporting (including PowerPoint presentations), including policies, standards, processes and procedures

●Very high attention to detail, with strong skills in managing/presenting data and information.

●Demonstrable conceptual, analytical and innovative problem-solving and evaluative skills.

●Good communication and interpersonal skills to effectively collaborate with stakeholders, and internal teams.