SOC Analyst (Tier 2)

We are hiring a Tier 2 SOC Analyst to join our 24/7 Security Operations Center in Singapore. You will investigate and triage security alerts escalated from Tier 1 analysts, perform deep-dive analysis on suspicious activity, and coordinate incident response for confirmed threats.

Our SOC is a critical part of the Cyberix managed detection and response service. You will use our own platform to investigate alerts, correlate events across customer environments, and provide actionable recommendations to customers facing active threats. Your analysis directly informs how we improve our detection rules and response playbooks.

This role is ideal for someone who enjoys hands-on investigation work and wants to grow into a senior security operations role. You will gain exposure to a wide variety of attack techniques across diverse customer environments and work alongside experienced incident responders.

Responsibilities

• ▸ Investigate and triage escalated security alerts with thorough analysis and documentation
• ▸ Perform deep-dive forensic analysis on endpoints, network traffic, and log data
• ▸ Coordinate incident response activities and communicate findings to customers
• ▸ Develop and refine SOC playbooks and runbooks for common alert types
• ▸ Identify patterns in alert data and recommend improvements to detection rules
• ▸ Mentor Tier 1 analysts and contribute to team knowledge sharing sessions

Requirements

• ▸ 2+ years of experience in a SOC or incident response role
• ▸ Strong understanding of common attack techniques and the cyber kill chain
• ▸ Experience with SIEM platforms, EDR tools, and network analysis tools
• ▸ Proficiency in log analysis and event correlation across multiple data sources
• ▸ Excellent written communication skills for incident reports and customer advisories
• ▸ Ability to work rotating shifts in a 24/7 operational environment

Nice to Have

• ▸ Security certifications (GCIH, GCFA, CySA+, or equivalent)
• ▸ Experience with scripting (Python, PowerShell) for analysis automation
• ▸ Familiarity with cloud security monitoring (AWS, Azure, GCP)
• ▸ Background in digital forensics or malware analysis

Interested in this role?

Send us your resume and a brief note about why you are excited about this position. We review every application and respond within five business days.