L3 SOC Analyst #IFL - D09 Cairnhill, Orchard, River Valley, SG

Roles & Responsibilities

Detection Engineering

• Design, develop, and deploy high-fidelity detection rules in SIEM (Splunk, Microsoft Sentinel, Devo, QRadar, EDR, etc.).
• Create custom use cases to detect MITRE TTPs aligned with real-world threats and red team activities.
• Conduct detection gap analysis, tune alerting mechanisms, and eliminate false positives at the MSS customer environment
• Perform regular fine-tuning and optimization of detection rules, correlation logic, and alert thresholds across SIEM, EDR, and other security platforms to enhance detection accuracy and reduce false positives.
• Continuously assess detection efficacy based on incident feedback and threat landscape evolution, implementing improvements accordingly.
• Collaborate with red / purple teams to validate detection logic and build threat-informed defenses.
• Regularly review, update, and enhance detection logic to ensure alignment with the latest threat intelligence, adversary TTPs, and evolving attack techniques.
• Maintain relevancy and effectiveness of security detections by incorporating insights from threat hunts, incident response cases, red team exercises, and industry best practices.

Threat Hunting and Threat Intel :

Incident Response :

Collaboration & Mentorship :

Interested applicants, please Email, fabianling@recruitexpress.com.sg

Fabian Ling Tuong Liing

R25129353

Recruit Express Pte Ltd

EA Licence No : 99C4599

We regret that only shortlisted candidates will be contacted.

Tell employers what skills you have

Digital Forensics

SIEM

Defense

Forensic Analysis

Root Cause Analysis

Mentorship

Engineering Design

Telemetry

Threat Intelligence

Evidence