{"id":3597159,"url":"https://alion.io/job/zenith-infotech-security-operations-analyst-contract","title":"Security Operations Analyst - Contract","company":{"id":246649,"name":"Zenith Infotech","domain":"zenithinfotech.com.sg","url":"https://alion.io/company/zenithinfotech","size_band":null,"is_staffing_agency":true,"employer_type":"agency","is_intermediary":false,"listed_via":null,"ats_vendor":null,"truth_index":null},"role":"Security","role_family":"Security","seniority":"junior","employment_type":"contractor","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Singapore"],"countries":["SG"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":6000,"max":8000,"currency":"SGD","period":"month","gross":true,"usd_annual":75144},"salary_estimate":null,"experience_years_min":2,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"CVSS","optional":false},{"name":"DLP","optional":false},{"name":"Microsoft Sentinel","optional":false},{"name":"MITRE ATT&CK","optional":false},{"name":"ServiceNow","optional":false},{"name":"SIEM","optional":false},{"name":"Trend Micro","optional":false},{"name":"AWS","optional":true},{"name":"Azure","optional":true},{"name":"CVE","optional":true},{"name":"Linux","optional":true},{"name":"Windows","optional":true}],"status":"live","first_seen_at":"2026-11-02T00:00:00Z","employer_posted_date":null,"last_verified_at":"2026-11-02T00:00:00Z","board_verified":false,"closed_at":null,"days_open":2,"trust":{"level":"not_scored","repost_count":null,"flags":[],"days_open":2},"description":"Role Summary\nThe Security Operations Analyst is a key member of the SOC, responsible for monitoring, triaging, and responding to security events across the organisation’s endpoint, cloud, and network environments. \nThe role also covers Data Loss Prevention (DLP) monitoring, vulnerability management, and the documentation and reporting that supports audit and compliance. \nThe ideal candidate is analytical, detail-oriented, and calm under pressure, and works effectively with infrastructure and application teams to drive remediation.\n\nKey Responsibilities\n1. Security Monitoring & Incident Response\n• Monitor alerts and dashboards across Trend Micro (e.g. Vision One, Deep Security, Apex One), Microsoft Sentinel, and other security tools.\n• Triage alerts, separate true from false positives, and prioritise by severity and business impact.\n• Investigate suspicious activity using log analysis, KQL queries, and threat intelligence.\n• Escalate confirmed incidents to L2/L3 or the incident response team with clear evidence.\n• Carry out initial containment per playbooks, such as isolating endpoints or blocking indicators.\n• Tune detection rules and alert thresholds to reduce noise.\n2. Data Loss Prevention (DLP)\n• Monitor and triage DLP alerts for unauthorised transfer, sharing, or exfiltration of sensitive data.\n• Investigate policy violations, determine whether they are accidental, negligent, or malicious, and escalate as required.\n• Review and tune DLP policies and rules to reduce false positives.\n• Coordinate with data owners, HR, and compliance on confirmed data leakage incidents.\n• Report DLP incident trends and policy effectiveness.\n3. Vulnerability Management\n• Run and review vulnerability scans using Tenable and similar tools.\n• Prioritise findings by severity (CVSS), exploitability, and asset criticality.\n• Raise remediation tickets, track them to closure, and escalate overdue items.\n• Manage risk acceptance and exception requests with supporting justification.\n• Produce vulnerability and patch compliance reports for management and audits.\n4. Documentation & Reporting\n• Document incidents and investigations in the ticketing system (e.g. ServiceNow).\n• Maintain SOC playbooks, runbooks, and SOPs.\n• Prepare shift handover notes and regular security reports.\n• Support audits, compliance checks, and post-incident reviews.\n\nQualifications & Experience\nRequired\n• Diploma or Bachelor’s degree in Cybersecurity, IT, Computer Science, or a related field (or equivalent experience).\n• 2–4 years in a SOC, security operations, or IT security role.\n• Hands-on experience with a SIEM (Microsoft Sentinel preferred) and endpoint or XDR tools (Trend Micro preferred).\n• Experience with vulnerability scanners (Tenable preferred) and patch management processes.\n• Understanding of DLP concepts and tools, and of the incident response lifecycle and MITRE ATT&CK.\nPreferred Certifications\n• CompTIA Security+, Microsoft SC-200, or Trend Micro certifications.\nNice to Have\n• CEH, GCIH, GCIA, Tenable certifications, or Azure/AWS security certifications.\nSkills & Competencies\nTechnical\n• Strong knowledge of network, endpoint, cloud, and OS security (Windows, Linux).\n• Ability to write and read KQL queries and analyse logs.\n• Familiarity with firewalls, IDS/IPS, WAF, EDR/XDR, DLP, and vulnerability scanners.\n• Understanding of CVSS scoring, CVE tracking, and risk-based remediation prioritisation.\nBehavioural\n• Strong analytical thinking and attention to detail.\n• Clear written and verbal communication.\n• Ability to work with infrastructure and application teams to drive remediation.\n• Calm and effective under pressure and in shift work.\n\nSkills\nSecurity Administration, Security Tools, Incident Response, Requirement Specification, Information Technology, Monitoring Trends, Sentinel, reduce false-positives, Computer Science, Tuning, Log Analysis, Cybersecurity, Bookkeeping, Threat Intelligence, Business Impact Analysis, Security Incident Response","description_format":"text","description_chars":3978,"description_truncated":false,"requirements":{"experience_years_min":2,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Email Security"],"lifecycle":[{"event":"open","at":"2026-11-02T04:29:30Z"}],"visa":[],"liveness":{"score":54,"band":"ok","label":"Likely open","p_open":1,"p_active":0.542,"p_room":1,"age_days":2,"expected_fill_days":14,"reasons":["seen:2","agency","velocity","win:early","comp:junior"],"computed_at":"2026-11-04T06:34:25Z"},"pay":{"stated_usd_annual":75144,"is_top_pay":false},"html_url":"https://alion.io/job/zenith-infotech-security-operations-analyst-contract","json_url":"https://alion.io/job/zenith-infotech-security-operations-analyst-contract.json","meta":{"generated_at":"2026-11-04T20:39:58Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":31933,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-05T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":246649},"rest":"https://alion.io/mcp/rest/get_company?id=246649"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fzenith-infotech-security-operations-analyst-contract"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fzenith-infotech-security-operations-analyst-contract"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fzenith-infotech-security-operations-analyst-contract"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/zenith-infotech-security-operations-analyst-contract\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fzenith-infotech-security-operations-analyst-contract"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3597159}},{"tool":"search_jobs","arguments":{"company":"zenithinfotech.com.sg","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3597159},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}