{"id":1327115,"url":"https://alion.io/job/ocbc-bank-senior-soc-engineer-gts-command-centre","title":"Senior SOC Engineer (GTS - Command Centre)","company":{"id":4187,"name":"OCBC Bank","domain":"ocbc.com","url":"https://alion.io/company/ocbc","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":{"grade":"B","score":80,"open_postings":111,"ghost_share":0,"stale_share":0.793,"repost_share":0,"time_to_fill_p50_days":51,"computed_at":"2026-11-06T05:58:05Z"}},"role":"Hardware","role_family":"Hardware","seniority":"senior","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Singapore"],"countries":["SG"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":46000,"max_usd":99000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":28},"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Active Directory","optional":false},{"name":"Agentic Workflows","optional":false},{"name":"Bash","optional":false},{"name":"Fine-tuning","optional":false},{"name":"Linux","optional":false},{"name":"MITRE ATT&CK","optional":false},{"name":"PowerShell","optional":false},{"name":"Python","optional":false},{"name":"Rest API","optional":false},{"name":"SIEM","optional":false},{"name":"Windows","optional":false},{"name":"Microsoft Sentinel","optional":true},{"name":"Splunk","optional":true}],"status":"live","first_seen_at":"2026-08-18T00:00:00Z","employer_posted_date":"2026-08-18","last_verified_at":"2026-11-06T06:16:46Z","board_verified":true,"closed_at":null,"days_open":80,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":80},"description":"WHO WE ARE:\nAs Singapore’s longest established bank, we have been dedicated to enabling individuals and businesses to achieve their aspirations since 1932. How? By taking the time to truly understand people. From there, we provide support, services, solutions, and career paths that meet their individual needs and desires.\nToday, we’re on a journey of transformation. Leveraging technology and creativity to become a future-ready learning organisation. But for all that change, our strategic ambition is consistently clear and bold, which is to be Asia’s leading financial services partner for a sustainable future.\nWe invite you to build the bank of the future. Innovate the way we deliver financial services. Work in friendly, supportive teams. Build lasting value in your community. Help people grow their assets, business, and investments. Take your learning as far as you can. Or simply enjoy a vibrant, future-ready career.\nYour Opportunity Starts Here.\nWhy Join\nProtecting our customers' assets and data is at the heart of everything we do at OCBC. As a Cyber Engineering - Risk professional, you'll play a critical role in safeguarding our systems and networks from cyber threats. You'll be part of a team that's shaping the future of cybersecurity in the financial industry.\nHow you succeed\nThe candidate will be part of the Cyber Security Operations team and will be responsible for engineering and enhancing SOC capabilities across threat detection, automation, SOAR playbooks, AI-assisted workflows and SOC tooling. The candidate will support the development of scalable, repeatable and measurable capabilities to improve threat monitoring, investigation efficiency and response readiness.\nWhat you do\nDevelop and maintain SOAR playbooks, automation workflows and AI-assisted SOC processes to support alert triage, enrichment, correlation, investigation and response.\n\nDesign automated enrichment and correlation workflows to improve investigation context and reduce manual analysis.\n\nReview detection effectiveness, false positives, coverage gaps and recurring alert patterns, and recommend improvements to prevention, detection and response capabilities.\n\nLead development, validation and finetuning of detection use cases, SOAR playbooks and AI-assisted SOC workflows.\n\nManage integration of SOC tools and data sources to improve alert enrichment, event correlation, investigation context, automation reliability and reporting.\n\nDrive troubleshooting of detection issues, broken playbooks, failed automations, data quality issues and platform-related constraints affecting SOC operations.\n\nOptimise usage of SOC tools and evaluate new technologies where required.\n\nBuild repeatable and efficient engineering processes to support monitoring, detection, analysis, escalation and remediation of potential cyber security incidents.\n\nTrack and report effectiveness of SOC engineering enhancements such as playbook adoption, automation rate and analyst effort reduction.\n\nProvide technical guidance to SOC analysts on effective use of SOC tools, detection logic, SOAR playbooks and AI-assisted investigation workflows.\n\nIdentify opportunities where automation, AI-assisted triage or agentic workflows can safely reduce manual effort, improve investigation consistency and accelerate response.\n\nIdentify opportunities for SOC improvements, including metrics definition, playbook enhancements, detection optimisation, workflow automation and analyst capability uplift.\n\nPrioritise tasks appropriately and formulate clear responses or recommendations to stakeholders in a fast-paced environment.\n\nWho you are\n5 or more years of experience in a SOC environment, security engineering, detection engineering, incident response or related cybersecurity field.\n\nStrong hands-on experience with SOC tools such as SIEM, SOAR, EDR, XDR or UEBA.\n\nExperience developing and maintaining SOAR playbooks or automation workflows.\n\nExperience designing, developing, deploying and finetuning security monitoring use cases based on frameworks such as MITRE ATT&CK.\n\nExperience developing threat detection content, SIEM correlation rules, EDR queries, dashboards and alert tuning recommendations.\n\nStrong proficiency in SIEM, network traffic, host event and security event log analysis.\n\nGood understanding of Windows, Linux, Active Directory, identity compromise, network protocols, cloud/SaaS logs, endpoint artefacts and common attacker techniques.\n\nExperience working with threat intelligence, IOCs and TTPs to support detection and response capability development.\n\nExperience with REST APIs, JSON, webhooks and other tool integration.\n\nProficiency in Python, PowerShell, Bash or similar scripting is preferred.\n\nAbility to write clear technical documentation, workflow diagrams, implementation guides and analyst-facing procedures.\n\nAbility to prioritise effectively, manage competing operational demands and make sound technical recommendations.\n\nFamiliarity with AI-assisted security operations, SOC copilots, automated enrichment, agentic workflows or machine-assisted triage is a plus.\n\nExperience in banking, financial services, critical infrastructure or highly regulated environments is a plus.\n\nRelevant certifications such as GCIH, GCIA, GCFA, GNFA, GREM, OSCP, CISSP, Splunk, Microsoft Sentinel, SOAR-related certifications or equivalent are preferred.\n\nWho we are\nAs Singapore's longest established bank, we have been dedicated to enabling individuals and businesses to achieve their aspirations since 1932. How? By taking the time to truly understand people. From there, we provide support, services, solutions, and career paths that meet their individual needs and desires.\nToday, we're on a journey of transformation. Leveraging technology and creativity to become a future-ready learning organisation.\nBut for all that change, our strategic ambition is consistently clear and bold, which is to be Asia's leading financial services partner for a sustainable future.\nWe invite you to build the bank of the future. Innovate the way we deliver financial services. Work in friendly, supportive teams. Build lasting value in your community. Help people grow their assets, business, and investments. Take your learning as far as you can. Or simply enjoy a vibrant, future-ready career. Your Opportunity Starts Here.\nWhat we offer:\nCompetitive base salary. A suite of holistic, flexible benefits to suit every lifestyle. Community initiatives. Industry-leading learning and professional development opportunities. Your wellbeing, growth and aspirations are every bit as cared for as the needs of our customers.","description_format":"text","description_chars":6612,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Professional development"],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Incident Response","Financial Services","Commercial & Retail Banks","Wealth Management & Financial Advisors"],"lifecycle":[{"event":"open","at":"2026-09-27T04:33:12Z"}],"visa":[],"liveness":{"score":20,"band":"cold","label":"Long shot","p_open":1,"p_active":0.548,"p_room":0.36,"age_days":80,"expected_fill_days":51,"reasons":["conf:8","stale_co","velocity","win:tail","crowd:brand"],"computed_at":"2026-11-06T05:58:05Z"},"pay":null,"html_url":"https://alion.io/job/ocbc-bank-senior-soc-engineer-gts-command-centre","json_url":"https://alion.io/job/ocbc-bank-senior-soc-engineer-gts-command-centre.json","meta":{"generated_at":"2026-11-06T07:28:02Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":13283,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-07T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":4187},"rest":"https://alion.io/mcp/rest/get_company?id=4187"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Focbc-bank-senior-soc-engineer-gts-command-centre"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Focbc-bank-senior-soc-engineer-gts-command-centre"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Focbc-bank-senior-soc-engineer-gts-command-centre"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/ocbc-bank-senior-soc-engineer-gts-command-centre\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Focbc-bank-senior-soc-engineer-gts-command-centre"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":1327115}},{"tool":"search_jobs","arguments":{"company":"ocbc.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":1327115},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}