{"id":4074575,"url":"https://alion.io/job/ensign-infosecurity-security-operations-centre-soc-analyst","title":"Security Operations Centre (SOC) Analyst","company":{"id":50230,"name":"Ensign InfoSecurity","domain":"ensigninfosecurity.com","url":"https://alion.io/company/ensign-infosecurity","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":{"grade":"C","score":67,"open_postings":50,"ghost_share":0.64,"stale_share":0,"repost_share":0,"time_to_fill_p50_days":10,"computed_at":"2026-11-11T05:49:22Z"}},"role":"Security","role_family":"Security","seniority":"junior","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Singapore"],"countries":["SG"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":null,"experience_years_min":2,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Google SecOps","optional":false},{"name":"IBM QRadar","optional":false},{"name":"Incident Management","optional":false},{"name":"MITRE ATT&CK","optional":false},{"name":"SIEM","optional":false},{"name":"Splunk","optional":false}],"status":"live","first_seen_at":"2026-11-11T14:55:12Z","employer_posted_date":"2026-11-11","last_verified_at":"2026-11-11T14:55:12Z","board_verified":true,"closed_at":null,"days_open":0,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":0},"description":"Ensign is hiring !\nWorking Hours: 12-hour rotating shifts (Day/Night), 24×7 operations\nJob Responsibilities\nMonitor and analyse security alerts from SIEM, EDR, NDR and other security monitoring platforms.\nPerform initial investigation, triage and classification of security alerts to identify potential cyber threats and incidents.\nEscalate security incidents to Level 2 analysts and relevant stakeholders in accordance with established procedures and SLAs.\nConduct initial incident investigation, including log analysis, threat intelligence enrichment and identification of affected systems.\nExecute pre-approved containment actions in accordance with established Standard Operating Procedures (SOPs).\nMaintain accurate incident records, investigation findings and escalation details in designated case management systems.\nPerform structured shift handovers to ensure continuity of security monitoring and incident management.\nIdentify false positives and recommend improvements to detection rules, SOPs and monitoring processes.\nSupport cybersecurity exercises, operational readiness activities and continuous improvement initiatives.\nJob Requirements\nSingapore Citizen or Permanent Resident residing in Singapore.\nMinimum 2 years of relevant SOC operations experience.\nHands-on experience with SIEM platforms such as Splunk, IBM QRadar, Google SecOps or equivalent.\nFamiliarity with EDR, NDR and other cybersecurity monitoring tools.\nGood understanding of cybersecurity threats, incident response processes and the MITRE ATT&CK framework.\nStrong analytical, troubleshooting and incident documentation skills.\nGood written and verbal communication skills in English.\nAble to work onsite in Tampines on 12-hour rotating shifts, including weekends and public holidays.\nMust be able to obtain and maintain the required security clearance.\nRelevant cybersecurity certifications such as CompTIA Security+, GCIH, Splunk certifications or equivalent will be advantageous.","description_format":"text","description_chars":1966,"description_truncated":false,"requirements":{"experience_years_min":2,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[{"language":"English","level":"All levels","optional":false}]},"benefits":[],"hiring_locations":[{"name":"Singapore","iso":"SG","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Incident Response","Threat Intelligence","Security Operations","Managed Security"],"lifecycle":[{"event":"open","at":"2026-11-11T14:55:12Z"}],"visa":[],"liveness":{"score":86,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.86,"p_room":1,"age_days":0,"expected_fill_days":10,"reasons":["conf:0","win:early","comp:junior"],"computed_at":"2026-11-11T15:54:23Z"},"pay":null,"html_url":"https://alion.io/job/ensign-infosecurity-security-operations-centre-soc-analyst","json_url":"https://alion.io/job/ensign-infosecurity-security-operations-centre-soc-analyst.json","meta":{"generated_at":"2026-11-11T15:54:23Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":29777,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-12T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.1,"usd":0.01,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":50230},"rest":"https://alion.io/mcp/rest/get_company?id=50230"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fensign-infosecurity-security-operations-centre-soc-analyst"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":2,"usd":0.2},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fensign-infosecurity-security-operations-centre-soc-analyst"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.1,"usd":0.01},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fensign-infosecurity-security-operations-centre-soc-analyst"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/ensign-infosecurity-security-operations-centre-soc-analyst\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fensign-infosecurity-security-operations-centre-soc-analyst"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":4074575}},{"tool":"search_jobs","arguments":{"company":"ensigninfosecurity.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":4074575},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}