Job Description

Location: Singapore

Join Fortinet, a cybersecurity pioneer with over two decades of excellence, as we continue to shape the future of cybersecurity and redefine the intersection of networking and security. At Fortinet, our mission is to safeguard people, devices, and data everywhere. We are currently seeking a dynamic Information Security Analyst to contribute to the success of our rapidly growing business.

This is a highly technical role, monitoring security events, identifying threats, assessing risks, and working with customers globally to improve their security posture. The role sits at the intersection of alert triage, detection engineering, and AI-augmented operations — the analyst will work within a Fortinet-native stack (FortiSIEM, FortiAnalyzer, FortiSOAR) and actively collaborate with AI agents to drive more accurate and efficient security operations.

FortiCloud SOC-as-a-Service team operates based on a follow the sun approach. Working hours for this position includes 5 days/40 hours per week, consisting of 1 weekend and 4 weekdays (e.g. Sunday – Thursday or Tuesday – Saturday), 8am – 4pm.

As a Information Security Analyst, you will:

Monitor SOC alerts to detect potential threats
Use threat intelligence feeds, triage alerts and filter out false-positives
Create custom reports, dashboards, and execute log searches to support investigations and customer's requirements
Work with customers and Forensic analysis team to contain and eradicate incidents if need be
Follow Incident Response playbooks, processes and procedures and help to improve them
Create/Update use case detections to detect new threats from raw logs
Create/Update playbooks to automate repetitive triage steps
Operationalise detection use cases from FortiSIEM and FortiAnalyzer into FortiSOAR, contributing to the team's detection engineering pipeline
Interact with AI agents during alert triage to review and validate AI-generated alert summaries, enrichment, and contextual analysis
Provide structured feedback to AI agents to continuously refine alert summarisation accuracy and triage decision logic based on real-world alert patterns.

We Are Looking For:

An insightful and influential collaborator to join our team. We encourage you to apply for this position if you have the following qualities:

Strong understanding of SOC operations, the Incident Response lifecycle, Cyber Kill Chain, threat vectors, threat intelligence, and cybersecurity frameworks (e.g. MITRE ATT&CK, NIST)
Hands-on experience with security log analysis (AV, IPS, Anti-Spam), Linux and Windows administration, PostgreSQL, regular expressions, and security visualisation and reporting tools
Practical experience with network security technologies including Firewalls, SIEM, EDR, and Sandbox; hands-on experience with Fortinet products (FortiSIEM, FortiAnalyzer, FortiSOAR) is a strong advantage
Aptitude for detection engineering — able to translate threat scenarios into structured use case logic and operationalise detections across FortiSIEM, FortiAnalyzer, and FortiSOAR
Comfortable working alongside AI agents; able to critically evaluate AI-generated alert summaries, enrichment, and triage recommendations, and provide structured feedback to improve them over time
Team player, self-directed, and disciplined communicator; cybersecurity certifications (GCIA, GCIH, GMON, GSOC, CEH, Security+) are a bonus

Why Join Us:

At Fortinet, we embrace diversity and inclusivity. We encourage applications from diverse backgrounds and identities. Explore our welcoming work environment designed for a rewarding career journey with an attractive Total Rewards package to support you with your overall health and financial well-being. Join us in bringing solutions that make a meaningful and lasting impact to our 660,000+ customers around the globe.

We will only notify shortlisted candidates.

Fortinet will not entertain any unsolicited resumes, please refrain from sending them to any Fortinet employees or Fortinet email aliases. Should any Agency submit any resumes to Fortinet, these resumes if considered, will be assumed to have been given by the Agency free of any related fees/charges.

Information Security Analyst - Singapore