{"id":3794740,"url":"https://alion.io/job/troytech-international-consulting-security-operation-analyst","title":"Security Operation Analyst","company":{"id":3802218,"name":"Troytech International Consulting","domain":"troytech.net","url":"https://alion.io/company/troytech-international-consulting","size_band":null,"is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":null,"truth_index":null},"role":"Security","role_family":"Security","seniority":"middle","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Singapore"],"countries":["SG"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":4200,"max":6000,"currency":"SGD","period":"month","gross":true,"usd_annual":56292},"salary_estimate":null,"experience_years_min":3,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AWS","optional":false},{"name":"CIS Benchmarks","optional":false},{"name":"CVSS","optional":false},{"name":"DLP","optional":false},{"name":"IAM","optional":false},{"name":"ISO 27001","optional":false},{"name":"Least Privilege","optional":false},{"name":"Linux","optional":false},{"name":"Microsoft Sentinel","optional":false},{"name":"SIEM","optional":false},{"name":"Trend Micro","optional":false},{"name":"Windows","optional":false},{"name":"Ansible","optional":true},{"name":"Bash","optional":true},{"name":"ITSM","optional":true},{"name":"MITRE ATT&CK","optional":true},{"name":"PowerShell","optional":true},{"name":"Python","optional":true},{"name":"ServiceNow","optional":true}],"status":"live","first_seen_at":"2026-11-05T00:00:00Z","employer_posted_date":null,"last_verified_at":"2026-11-05T00:00:00Z","board_verified":false,"closed_at":null,"days_open":4,"trust":{"level":"not_scored","repost_count":null,"flags":[],"days_open":4},"description":"Job Summary\nResponsible for the day-to-day operation, administration,and hardening of the system’s security tools and controls. Complements the SOCby owning security tooling health, vulnerability and patch remediation,configuration compliance, and audit readiness, so that security controls stayeffective, current, and evidenced.\nResponsibilities\nAdminister and maintain security platforms including Trend Micro (Vision One, Deep Security, Apex One), Tenable, Microsoft Sentinel, and DLP tools to ensure operational effectiveness\nDeploy and upgrade security agents, manage policies, and monitor tool health, licensing, and coverage for continuous protection\nOnboard new servers, applications, and log sources into security tooling and SIEM to expand monitoring scope\nTune security policies, detection rules, and exclusions collaboratively with SOC and application teams to optimize threat detection\nSchedule and review vulnerability scans, validate and prioritize findings by CVSS, exploitability, and asset criticality to focus remediation efforts\nRaise remediation tickets, track progress to closure, and escalate overdue items to maintain timely vulnerability resolution\nCoordinate patch cycles with infrastructure and application teams, including emergency patching, to reduce exposure windows\nManage risk acceptance and exception requests with supporting justification to balance security and business needs\nApply and verify security baselines (e.g., CIS benchmarks for RHEL, Windows, and cloud) across servers and cloud workloads to enforce hardening\nAssess application impact of hardening controls with application teams before rollout to prevent disruptions\nMonitor configuration drift and track remediation of non-compliant assets to maintain compliance\nSupport periodic access reviews, privileged account audits, and user access recertification to uphold identity security\nReview IAM roles and policies (e.g., AWS) against least-privilege principles to minimize access risks\nMonitor certificate expiry, key management, and secrets hygiene to ensure secure credential management\nSupport SOC and incident response teams with investigation data, tool queries, and containment actions during incidents\nContribute to post-incident reviews and implement control improvements to strengthen security posture\nPrepare regular reports on patch compliance, vulnerability trends, hardening status, and tool coverage for governance\nCollect and maintain evidence for audits and compliance checks (e.g., ISO 27001, government security standards) to demonstrate control effectiveness\nMaintain security SOPs, runbooks, and the security risk register to support operational consistency\nTrack security-related change requests and participate in change advisory discussions to manage risk during changes\nRequired competencies and certifications\nDiploma or Bachelor’s degree in Cybersecurity, IT, ComputerScience, or a related field (or equivalent experience)\n3-5 years in security operations, security administration,or infrastructure security\nHands-on experience administering endpoint, XDR, orvulnerability management tools (Trend Micro and Tenable preferred)\nExperience with patch management and configuration hardeningon Linux (RHEL preferred) and Windows\nWorking knowledge of AWS security services and sharedresponsibility model\nPreferred certifications: CompTIA Security+, CISSP(associate or full), Microsoft SC-200, AWS Security Specialty\nNice to have: CISM, CISA, ISO 27001 Lead Implementer,Tenable certifications\nSkills\nStrong understanding of security frameworks and standards(CIS, NIST, ISO 27001, MITRE ATT&CK)\nFamiliarity with SIEM, EDR/XDR, DLP, WAF, firewalls, andvulnerability scanners\nScripting and automation (Bash, PowerShell, Python, Ansible)for compliance checks and reporting\nWorking knowledge of ITSM tools (e.g. ServiceNow) and changemanagement processes\nStrong analytical and documentation skills, with the abilityto explain risk to technical and non-technical stakeholders\nAbility to drive remediation across multiple teams andvendors\nSkills\nSIEM, Issue Escalation, Security Administration, Technology Risk Management, Regulatory Compliance, Unified Threat Management, Environmental Remediation, Security Framework, Patch Management, IT knowledge, Ansible, Change Management Process, Corporate Security, Drive Awareness, Security Monitoring, Security Platform","description_format":"text","description_chars":4374,"description_truncated":false,"requirements":{"experience_years_min":3,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["IT Consulting & Digital Transformation","Custom Software Development"],"lifecycle":[{"event":"open","at":"2026-11-05T08:31:15Z"}],"visa":[],"liveness":{"score":90,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.903,"p_room":1,"age_days":4,"expected_fill_days":26,"reasons":["seen:4","velocity","win:early"],"computed_at":"2026-11-09T06:03:00Z"},"pay":{"stated_usd_annual":56292,"is_top_pay":false},"html_url":"https://alion.io/job/troytech-international-consulting-security-operation-analyst","json_url":"https://alion.io/job/troytech-international-consulting-security-operation-analyst.json","meta":{"generated_at":"2026-11-09T13:30:39Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":17806,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-10T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.1,"usd":0.01,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":3802218},"rest":"https://alion.io/mcp/rest/get_company?id=3802218"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Ftroytech-international-consulting-security-operation-analyst"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":2,"usd":0.2},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Ftroytech-international-consulting-security-operation-analyst"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.1,"usd":0.01},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Ftroytech-international-consulting-security-operation-analyst"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/troytech-international-consulting-security-operation-analyst\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Ftroytech-international-consulting-security-operation-analyst"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3794740}},{"tool":"search_jobs","arguments":{"company":"troytech.net","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3794740},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}