{"id":3726255,"url":"https://alion.io/job/kris-infotech-security-operations-analyst","title":"Security Operations Analyst","company":{"id":278683,"name":"Kris Infotech","domain":"kris.sg","url":"https://alion.io/company/kris-2","size_band":null,"is_staffing_agency":true,"employer_type":"agency","is_intermediary":false,"listed_via":null,"ats_vendor":"Zoho Recruit","truth_index":null},"role":"Security","role_family":"Security","seniority":"junior","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Singapore"],"countries":["SG"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":6500,"max":9000,"currency":"SGD","period":"month","gross":true,"usd_annual":84312},"salary_estimate":null,"experience_years_min":2,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"CVSS","optional":false},{"name":"DLP","optional":false},{"name":"Microsoft Sentinel","optional":false},{"name":"MITRE ATT&CK","optional":false},{"name":"ServiceNow","optional":false},{"name":"SIEM","optional":false},{"name":"Trend Micro","optional":false},{"name":"AWS","optional":true},{"name":"Azure","optional":true},{"name":"CVE","optional":true},{"name":"Linux","optional":true},{"name":"Windows","optional":true}],"status":"live","first_seen_at":"2026-11-04T00:00:00Z","employer_posted_date":null,"last_verified_at":"2026-11-04T00:00:00Z","board_verified":false,"closed_at":null,"days_open":3,"trust":{"level":"not_scored","repost_count":null,"flags":[],"days_open":3},"description":"Job Description:\nSecurity Monitoring & Incident Response:\nMonitor alerts and dashboards across Trend Micro (e.g. Vision One, Deep Security, Apex One), Microsoft Sentinel, and other security tools.\nTriage alerts, separate true from false positives, and prioritise by severity and business impact.\nInvestigate suspicious activity using log analysis, KQL queries, and threat intelligence.\nEscalate confirmed incidents to L2/L3 or the incident response team with clear evidence.\nCarry out initial containment per playbooks, such as isolating endpoints or blocking indicators.\nTune detection rules and alert thresholds to reduce noise.\nData Loss Prevention (DLP):\nMonitor and triage DLP alerts for unauthorised transfer, sharing, or exfiltration of sensitive data.\nInvestigate policy violations, determine whether they are accidental, negligent, or malicious, and escalate as required.\nReview and tune DLP policies and rules to reduce false positives\nCoordinate with data owners, HR, and compliance on confirmed data leakage incidents.\nReport DLP incident trends and policy effectiveness.\nVulnerability Management:\nRun and review vulnerability scans using Tenable and similar tools.\nPrioritise findings by severity (CVSS), exploitability, and asset criticality.\nRaise remediation tickets, track them to closure, and escalate overdue items.\nManage risk acceptance and exception requests with supporting justification.\nProduce vulnerability and patch compliance reports for management and audits.\nDocumentation & Reporting:\nDocument incidents and investigations in the ticketing system (e.g. ServiceNow).\nMaintain SOC playbooks, runbooks, and SOPs.\nPrepare shift handover notes and regular security reports.\nSupport audits, compliance checks, and post-incident reviews..\nRequirements:\nDiploma or Bachelor’s degree in Cybersecurity, IT, Computer Science, or a related field (or equivalent experience).\n2-4 years in a SOC, security operations, or IT security role.\nHands-on experience with a SIEM (Microsoft Sentinel preferred) and endpoint or XDR tools (Trend Micro preferred).\nExperience with vulnerability scanners (Tenable preferred) and patch management processes.\nUnderstanding of DLP concepts and tools, and of the incident response lifecycle and MITRE ATT&CK.\nPreferred certifications: CompTIA Security+, Microsoft SC-200, or Trend Micro certifications.\nNice to have: CEH, GCIH, GCIA, Tenable certifications, or Azure/AWS security certifications.\nSkills:\nStrong knowledge of network, endpoint, cloud, and OS security (Windows, Linux).\nAbility to write and read KQL queries and analyse logs.\nFamiliarity with firewalls, IDS/IPS, WAF, EDR/XDR, DLP, and vulnerability scanners.\nUnderstanding of CVSS scoring, CVE tracking, and risk-based remediation prioritisation.\nStrong analytical thinking, attention to detail, and clear written and verbal communication.\nAbility to work with infrastructure and application teams to drive remediation.\nCalm and effective under pressure and in shift work.\nShift timing: 8:00am–5:00pm or 5:00pm–2:00am, 5 days per week (including weekend and PH).\nSkills\nXDR, SIEM, Audit and Compliance, Trend Micro, firewall software, Cloud Security, Linux Security, Documentation, Patch Management, Windows Security, Cross Functional Team Building, Risk and Compliance Reporting, Log Analysis, Networking, ServiceNow, Data Loss Prevention, Endpoint Security, Security Monitoring, Threat and Vulnerability Management, Security Incident Response","description_format":"text","description_chars":3459,"description_truncated":false,"requirements":{"experience_years_min":2,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Security Operations"],"lifecycle":[{"event":"open","at":"2026-11-04T04:42:45Z"}],"visa":[],"liveness":{"score":54,"band":"ok","label":"Likely open","p_open":1,"p_active":0.542,"p_room":1,"age_days":3,"expected_fill_days":22,"reasons":["seen:3","agency","velocity","win:early","comp:junior"],"computed_at":"2026-11-07T05:47:08Z"},"pay":{"stated_usd_annual":84312,"is_top_pay":false},"html_url":"https://alion.io/job/kris-infotech-security-operations-analyst","json_url":"https://alion.io/job/kris-infotech-security-operations-analyst.json","meta":{"generated_at":"2026-11-07T19:32:05Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":30413,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-08T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":278683},"rest":"https://alion.io/mcp/rest/get_company?id=278683"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fkris-infotech-security-operations-analyst"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fkris-infotech-security-operations-analyst"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fkris-infotech-security-operations-analyst"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/kris-infotech-security-operations-analyst\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fkris-infotech-security-operations-analyst"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3726255}},{"tool":"search_jobs","arguments":{"company":"kris.sg","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3726255},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}