Security Operations Analyst, Financial Services

Overview

Our client is an established financial services organisation with a strong presence in Asia and an international operating footprint. As part of the continued development of its cybersecurity capabilities, the organisation is looking to hire a Security Operations Analyst to join its Singapore-based security team. This is a hands-on opportunity within a lean environment where technology and security play a critical role in supporting business operations.

Role

Reporting to the Security Operations Lead, you will take ownership of day-to-day security monitoring and investigation activities, working closely with an external managed SOC while remaining accountable for validating, triaging and responding to escalated alerts. A key focus of the role will be the Microsoft security ecosystem, including Microsoft Sentinel, Defender XDR, Entra ID and Azure security tooling. You will conduct investigations across endpoint, identity, cloud and network telemetry, develop and tune detections using KQL, support incident response, and contribute to vulnerability management, threat intelligence, security awareness and management reporting. You will also help assess the effectiveness of the managed SOC and continuously improve detection quality and operational processes.

Requirements

• At least 4 years of hands-on experience in security operations, SOC or incident response, ideally within financial services or another regulated environment.
• Strong practical experience with Microsoft Sentinel, including KQL queries, analytics rule development and tuning, investigations and workbook creation.
• Hands-on knowledge of Microsoft Defender XDR across endpoint, identity and Microsoft 365 environments, together with Entra ID log analysis and Conditional Access.
• Experience investigating security incidents end to end, including establishing scope and impact, supporting containment and remediation, and applying frameworks such as MITRE ATT&CK.
• Broader exposure to Azure security, vulnerability management, network or DNS security tooling, and scripting with PowerShell or Python would be advantageous; relevant Microsoft certifications such as SC-200, AZ-500 or SC-300 are also valued.

To Apply

Interested candidates, please submit your resume to Grace Lim at [Confidential Information]. We regret to inform that only successful shortlisted candidates will be notified. License No: 16S8060 Registration no: R1988923