398 Intrusion Detection jobs in Singapore

1 year ago Be among the first 25 applicants

Get AI-powered advice on this job and more exclusive features.

Job Description

Develop and continually refine the security framework, information security policies, processes, procedures, and guidelines.

Ensure compliance with these policies and procedures through regular security reviews and audits, including log analysis and security assessments of customer ICT systems.

Conduct security risk management exercises and table-top exercises.

Perform vulnerability assessments and coordinate penetration testing activities.

Deliver information security awareness training.

Develop and manage the customer’s security incident response plan.

Lead and support the customer in resolving and responding to security incidents.

Serve as the primary point of contact and advisor for the customer on ICT security-related matters.

Manage project activities and deliverables during the implementation phase.

Job Requirements

Minimum of 5 years of experience in IT security.

Experience with networks, servers (Windows and UNIX), and databases.

Proven track record in IT security auditing and security assessments.

Proficient in analyzing logs from various sources and understanding protocols and traffic flows.

Knowledge of Active Directory, endpoint protection solutions, Early Detection and Response solutions, Database Activity Monitoring tools, and SIEM.

Adaptable, team-oriented, and proactive personality.

Ability to independently organize and plan work.

Capable of working effectively in a rapidly changing environment.

Strong multi-tasking skills and the ability to switch contexts effectively between different activities and teams.

CISSP, CISM, Security+, or other relevant IT security certifications (e.g., Imperva, Carbon Black) are advantageous.

EA Licence No.:18S9405 / EA Reg. No.:R1330864

Skills & Competencies

IT security,CISSP,CISM,Security+

• Seniority level Mid-Senior level

• Employment type Full-time

• Job function Information Technology
• Industries IT Services and IT Consulting

Referrals increase your chances of interviewing at Percept Solutions by 2x

Get notified about new Information Security Analyst jobs in Singapore .

We’re unlocking community knowledge in a new way. Experts add insights directly into each article, started with the help of AI.

1 year ago Be among the first 25 applicants

Get AI-powered advice on this job and more exclusive features.

Job Description
Develop and continually refine the security framework, information security policies, processes, procedures, and guidelines.
Ensure compliance with these policies and procedures through regular security reviews and audits, including log analysis and security assessments of customer ICT systems.
Conduct security risk management exercises and table-top exercises.
Perform vulnerability assessments and coordinate penetration testing activities.
Deliver information security awareness training.
Develop and manage the customer’s security incident response plan.
Lead and support the customer in resolving and responding to security incidents.
Serve as the primary point of contact and advisor for the customer on ICT security-related matters.
Manage project activities and deliverables during the implementation phase.
Job Requirements
Minimum of 5 years of experience in IT security.
Experience with networks, servers (Windows and UNIX), and databases.
Proven track record in IT security auditing and security assessments.
Proficient in analyzing logs from various sources and understanding protocols and traffic flows.
Knowledge of Active Directory, endpoint protection solutions, Early Detection and Response solutions, Database Activity Monitoring tools, and SIEM.
Adaptable, team-oriented, and proactive personality.
Ability to independently organize and plan work.
Capable of working effectively in a rapidly changing environment.
Strong multi-tasking skills and the ability to switch contexts effectively between different activities and teams.
CISSP, CISM, Security+, or other relevant IT security certifications (e.g., Imperva, Carbon Black) are advantageous.
EA Licence No.:18S9405 / EA Reg. No.:R1330864
Skills & Competencies
IT security,CISSP,CISM,Security+

Seniority level

• Seniority level

  Mid-Senior level

Employment type

• Employment type

  Full-time

Job function

• Job function

  Information Technology

• Industries

  IT Services and IT Consulting

Referrals increase your chances of interviewing at Percept Solutions by 2x

Get notified about new Information Security Analyst jobs in Singapore .

Information Technology - Cyber Security Analyst (Scoot)

Security Specialist, Detection & Response, Global Security Organisation - TikTok, Singapore

Information Security Analyst / IT Support Engineer

Technology & Cyber Security Risk Analyst

Information Technology - Cyber Security Specialist (Architecture and Engineering)

We’re unlocking community knowledge in a new way. Experts add insights directly into each article, started with the help of AI.

Key Roles and Responsibilities:

Monitors security alerts and events from various sources, investigates potential threats, and escalates incidents as necessary.

Assists in the implementation and monitoring of security controls, including firewalls, intrusion detection systems, and access controls.

Performs regular vulnerability assessments, analyses scan results, and assists in prioritising and remediating identified vulnerabilities.

Supports the incident response team in investigating security incidents, documenting findings, and participating in remediation efforts.

Assists in ensuring compliance with industry standards (e.g., GDPR, ISO 27001) by conducting assessments and implementing necessary controls.

Installs security measures and operates software to protect systems and information infrastructure, including firewalls and data encryption programmes

Documents security breaches and assess the damage they cause

Works with the security team to perform tests and uncover network vulnerabilities

Fixes detected vulnerabilities to maintain a high-security standard

Develops organisational best practices for IT security

Performs penetration testing

Upgrades systems to unable security software

Installs and upgrades antivirus software

Tests and evaluates new technology

Assists with the installation of security software and understands information security management

Researches security enhancements and makes recommendations to management

Stays abreast of information technology trends and security standards

Contributes to security awareness initiatives by creating training materials, conducting workshops, and educating employees about best security practices.

Maintains accurate records of security incidents, assessments, and actions taken for reporting and audit purposes.

Assists in the management and maintenance of security tools, including antivirus software, encryption tools, and security information and event management (SIEM) systems.

Participates in risk assessments to identify potential security threats, vulnerabilities, and associated risks to the organisation.

Collaborates with cross-functional teams, IT, and other teams to ensure security measures are integrated into the organisation's processes and projects.

Knowledge, Skills and Attributes:

Seasoned, experienced professional; has complete knowledge and understanding of area of specialisation

Uses evaluation, judgment, and interpretation to select right course of action

Excellent communication skills to effectively convey technical information to non-technical stakeholders

Excellent analytical thinking and problem-solving skills to prevent hacking on a network

Strong leadership skills to identify and evaluate potential risks and to develop solutions

Ability to identify and mitigate network vulnerabilities and explain how to avoid them

Proficiency in understanding of firewalls, proxies, SIEM, antivirus, and IDPS concepts

Proficiency in understanding of patch management with the ability to deploy patches in a timely manner whilst understanding business impact

Proficiency with MAC and OS

Familiarity with security frameworks, standards, and regulations (e.g., NIST, CIS, GDPR)

Proficiency of understanding in network and system architecture, protocols, and security controls

Strong analytical skills to analyse security incidents and assess potential risks

Ability to work both independently and collaboratively in a fast-paced environment

Academic Qualifications and Certifications:

Bachelor's degree or equivalent in information security, cybersecurity, computer science, or related

Security certifications such as CompTIA Security+, Certified Information Systems Security Professional (CISSP), or Certified Information Security Manager (CISM) are advantageous

Required Experience:

Seasoned demonstrated experience in information security or cybersecurity, or related roles

Seasoned demonstrated experience working in a global IT organisation

Seasoned demonstrated experience with computer network penetration testing and techniques

Seasoned demonstrated experience with security assessment and vulnerability scanning tools

We are seeking a cybersecurity professional to conduct end-to-end Vulnerability Assessment and Penetration Testing (VAPT) across mobile apps, cloud environments, networks, and applications for clients of various sizes.

• The selected candidate will support Governance, Risk, and Compliance (GRC) activities, including assisting with risk assessments, policy reviews, and compliance documentation.
• This role involves performing mobile security testing, including static/dynamic analysis, reverse engineering, and assessment of anti-tampering controls.
• You will conduct host configuration reviews against CIS Benchmarks/NIST standards, identifying misconfigurations and providing hardening recommendations.
• This position requires conducting thorough source code reviews for vulnerabilities in Java/Python/.NET/Node.js applications.
• The successful candidate will provide expert risk prioritization and remediation guidance tailored to client environments and business impact.
• You will deliver detailed technical reports with proof-of-concepts, executive summaries, and actionable mitigation steps.
• This role involves conducting risk assessment on digital solutions and third parties, identifying potential risks and providing options to protect critical infrastructure and application systems.
• The selected candidate will assist in developing policies, standards, and guidelines to safeguard digital assets.
• This position involves managing security projects and solution implementation activities that address cybersecurity risks.
• You will plan, design, and conduct cyber security incident response workshops and exercises.
• This role requires staying aware of latest industry standards, regulatory requirements, and the potential impacts to cybersecurity policies, standards, and procedures.
• You will participate in client briefings to explain findings, address concerns, and align security improvements with business goals.

• Excellent GRC skills
• Junior-level penetration testing background
• Mobile security testing expertise
• Static and dynamic analysis skills
• Reverse engineering capabilities
• Assessment of anti-tampering controls
• Host configuration review skills
• Source code review expertise
• Risk prioritization and remediation knowledge
• Cybersecurity incident response skills
• Latest industry standards awareness

• Opportunity to work with various clients and industries
• Chance to develop and implement new security protocols
• Collaborative team environment
• Ongoing training and education opportunities

Key Roles and Responsibilities:

Monitors security alerts and events from various sources, investigates potential threats, and escalates incidents as necessary.

Assists in the implementation and monitoring of security controls, including firewalls, intrusion detection systems, and access controls.

Performs regular vulnerability assessments, analyses scan results, and assists in prioritising and remediating identified vulnerabilities.

Supports the incident response team in investigating security incidents, documenting findings, and participating in remediation efforts.

Assists in ensuring compliance with industry standards (e.g., GDPR, ISO 27001) by conducting assessments and implementing necessary controls.

Installs security measures and operates software to protect systems and information infrastructure, including firewalls and data encryption programmes

Documents security breaches and assess the damage they cause

Works with the security team to perform tests and uncover network vulnerabilities

Fixes detected vulnerabilities to maintain a high-security standard

Develops organisational best practices for IT security

Performs penetration testing

Upgrades systems to unable security software

Installs and upgrades antivirus software

Tests and evaluates new technology

Assists with the installation of security software and understands information security management

Researches security enhancements and makes recommendations to management

Stays abreast of information technology trends and security standards

Contributes to security awareness initiatives by creating training materials, conducting workshops, and educating employees about best security practices.

Maintains accurate records of security incidents, assessments, and actions taken for reporting and audit purposes.

Assists in the management and maintenance of security tools, including antivirus software, encryption tools, and security information and event management (SIEM) systems.

Participates in risk assessments to identify potential security threats, vulnerabilities, and associated risks to the organisation.

Collaborates with cross-functional teams, IT, and other teams to ensure security measures are integrated into the organisation's processes and projects.

Knowledge, Skills and Attributes:

Seasoned, experienced professional; has complete knowledge and understanding of area of specialisation

Uses evaluation, judgment, and interpretation to select right course of action

Excellent communication skills to effectively convey technical information to non-technical stakeholders

Excellent analytical thinking and problem-solving skills to prevent hacking on a network

Strong leadership skills to identify and evaluate potential risks and to develop solutions

Ability to identify and mitigate network vulnerabilities and explain how to avoid them

Proficiency in understanding of firewalls, proxies, SIEM, antivirus, and IDPS concepts

Proficiency in understanding of patch management with the ability to deploy patches in a timely manner whilst understanding business impact

Proficiency with MAC and OS

Familiarity with security frameworks, standards, and regulations (e.g., NIST, CIS, GDPR)

Proficiency of understanding in network and system architecture, protocols, and security controls

Strong analytical skills to analyse security incidents and assess potential risks

Ability to work both independently and collaboratively in a fast-paced environment

Academic Qualifications and Certifications:

Bachelor's degree or equivalent in information security, cybersecurity, computer science, or related

Security certifications such as CompTIA Security+, Certified Information Systems Security Professional (CISSP), or Certified Information Security Manager (CISM) are advantageous

Required Experience:

Seasoned demonstrated experience in information security or cybersecurity, or related roles

Seasoned demonstrated experience working in a global IT organisation

Seasoned demonstrated experience with computer network penetration testing and techniques

Seasoned demonstrated experience with security assessment and vulnerability scanning tools

Join to apply for the Information Security Analyst (CSOC) role at TD

Join to apply for the Information Security Analyst (CSOC) role at TD

Get AI-powered advice on this job and more exclusive features.

Job Role/Responsibilities

The Information Security Analyst is responsible for tier 1/tier 2 triage, investigation, and incident response for Cyber security incidents.

• Conduct Real-time analysis on identified cyber incidents currently impacting the bank’s operations.
• Analyze, triage and remediate security incidents internally and/or escalate to Cyber Security Incident Response team (CSIRT) for further investigation, treatment or support if needed.
• Manage intake of incidents and reports from internal customers through internal ticketing system in a timely accurate manner in order to resolve a multitude of information security related situations.
• The ability to identify and triage and remediate security incidents such as Malware, Phishing and Web Attacks is required.
• The CSOC Security Analyst is responsible for supporting the event log monitoring, analysis needs of customers.
• The personnel in this role will work as part of a cyber security operations team responsible for carrying out 24x7 on-site security monitoring operations. Operations which are carried out in Singapore shifts that run from 7am-3pm, 12pm-8pm or 7pm-7am on a rotating basis.
• Accountable to respond to, investigate and remediate cyber threats to the bank. Escalate to internal and Cyber Security Incident Response team if required.
• This job contributes to Technology and Operations through first line management and identifications of electronic threats to TDBG’s infrastructure.
• The Information Security Analyst will be responsible for managing information between multiple technical teams, the CSOC, CSIRT and ITS, LOB TS when appropriate.

Job Requirements

• Min 3 years of Information Security Operations or similar working experience
• Understanding of security controls/mechanisms and threat/risk assessment techniques pertaining to complex data, application and networking environments.
• Excellent written and oral communication skills.
• Organizational and self-directing skills – ability to initiate, coordinate and prioritize responsibilities and follow through on tasks to completion.
• An approach to work that includes initiative, sound judgment, diplomacy and Discretion.
• Ability to work independently on a variety of assignments with minimal supervision.
• Ability to work without supervision with senior managers, supervisors, VIPs and Users.
• Advanced knowledge of security incident and event management, log analysis, Network traffic analysis, Malware investigation and remediation, SIEM correlation logic and alert generation.
• Ability to perform analysis and reporting on information from multiple data sources using data mining technique for the purpose of documenting analysis results, produce report and present to a technical and executive stakeholders.
• Understanding of Security principles, techniques and technologies such as SANS Top 20 Critical Security Controls and OWASP Top 10.
• A background with Cloud Security Monitoring is highly desired, preferably with Azure Security Center, Microsoft MCAS, AWS.
• Basic programming skills in various disciplines including scripting languages.
• Candidate should possess strong hands-on experience with traditional incidents response detection tools such as SIEM, EDR, XDR, Firewall, WAF, NIDS and equivalent.
• Experience with Security Orchestration, Automation and Response tools (SOAR).
• Demonstrate expert knowledge in Enterprise IT operations, incident management, change management, Access/Identity Management, Security Operations, vulnerability and compliance management, ticketing system, incident ticket life cycle and SLA terms

Background and Education:

• Completion of a Bachelor’s degree or equivalent program in Computer Science, Management Information Systems or similar field is required.
• Completion of a Master's degree or equivalent program in Computer Science, Management Information Systems or similar field is preferred.
• Preferably to have at least one of the following: GIAC (GSEC, GCIH, GCIA, GCFE, GCFA) CompTIA Security+ / CySA+, SC200, CISSP, CCSP

• Seniority level Associate

• Employment type Full-time

• Job function Information Technology
• Industries Banking

Referrals increase your chances of interviewing at TD by 2x

Get notified about new Information Security Analyst jobs in Singapore, Singapore .

We’re unlocking community knowledge in a new way. Experts add insights directly into each article, started with the help of AI.

Join to apply for the Information Security Analyst (CSOC) role at TD

Join to apply for the Information Security Analyst (CSOC) role at TD

Get AI-powered advice on this job and more exclusive features.

Job Role/Responsibilities

The Information Security Analyst is responsible for tier 1/tier 2 triage, investigation, and incident response for Cyber security incidents.

• Conduct Real-time analysis on identified cyber incidents currently impacting the bank’s operations.
• Analyze, triage and remediate security incidents internally and/or escalate to Cyber Security Incident Response team (CSIRT) for further investigation, treatment or support if needed.
• Manage intake of incidents and reports from internal customers through internal ticketing system in a timely accurate manner in order to resolve a multitude of information security related situations.
• The ability to identify and triage and remediate security incidents such as Malware, Phishing and Web Attacks is required.
• The CSOC Security Analyst is responsible for supporting the event log monitoring, analysis needs of customers.
• The personnel in this role will work as part of a cyber security operations team responsible for carrying out 24x7 on-site security monitoring operations. Operations which are carried out in Singapore shifts that run from 7am-3pm, 12pm-8pm or 7pm-7am on a rotating basis.
• Accountable to respond to, investigate and remediate cyber threats to the bank. Escalate to internal and Cyber Security Incident Response team if required.
• This job contributes to Technology and Operations through first line management and identifications of electronic threats to TDBG’s infrastructure.
• The Information Security Analyst will be responsible for managing information between multiple technical teams, the CSOC, CSIRT and ITS, LOB TS when appropriate.

Job Requirements

• Min 3 years of Information Security Operations or similar working experience
• Understanding of security controls/mechanisms and threat/risk assessment techniques pertaining to complex data, application and networking environments.
• Excellent written and oral communication skills.
• Organizational and self-directing skills – ability to initiate, coordinate and prioritize responsibilities and follow through on tasks to completion.
• An approach to work that includes initiative, sound judgment, diplomacy and Discretion.
• Ability to work independently on a variety of assignments with minimal supervision.
• Ability to work without supervision with senior managers, supervisors, VIPs and Users.
• Advanced knowledge of security incident and event management, log analysis, Network traffic analysis, Malware investigation and remediation, SIEM correlation logic and alert generation.
• Ability to perform analysis and reporting on information from multiple data sources using data mining technique for the purpose of documenting analysis results, produce report and present to a technical and executive stakeholders.
• Understanding of Security principles, techniques and technologies such as SANS Top 20 Critical Security Controls and OWASP Top 10.
• A background with Cloud Security Monitoring is highly desired, preferably with Azure Security Center, Microsoft MCAS, AWS.
• Basic programming skills in various disciplines including scripting languages.
• Candidate should possess strong hands-on experience with traditional incidents response detection tools such as SIEM, EDR, XDR, Firewall, WAF, NIDS and equivalent.
• Experience with Security Orchestration, Automation and Response tools (SOAR).
• Demonstrate expert knowledge in Enterprise IT operations, incident management, change management, Access/Identity Management, Security Operations, vulnerability and compliance management, ticketing system, incident ticket life cycle and SLA terms

Background and Education:

• Completion of a Bachelor’s degree or equivalent program in Computer Science, Management Information Systems or similar field is required.
• Completion of a Master's degree or equivalent program in Computer Science, Management Information Systems or similar field is preferred.
• Preferably to have at least one of the following: GIAC (GSEC, GCIH, GCIA, GCFE, GCFA) CompTIA Security+ / CySA+, SC200, CISSP, CCSP

Seniority level

• Seniority level

  Associate

Employment type

• Employment type

  Full-time

Job function

• Job function

  Information Technology

• Industries

  Banking

Referrals increase your chances of interviewing at TD by 2x

Get notified about new Information Security Analyst jobs in Singapore, Singapore .

Information Technology - Cyber Security Analyst (Scoot)

Analyst, Cyber Security Engineer, Information Security Services, Group Technology

(Senior) Cyber Security Consultant & Penetration Tester

Cyber Security Analyst - Intern #GeneralInternship

Offensive Security Engineer (Red Team) - Information Security

Senior Security Engineer (Security Governance) - Information Security

IT Compliance & Cybersecurity Analyst, Financial Service (Campus Recruitment 2025)

AVP/Senior Associate, Cybersecurity Engineer - Machine Identity & Automation, Information Security Services, Group Technology

Senior Information Security Engineer (Security Governance) - Infrastructure Security

Information Technology Security Engineer

IT Compliance & Cybersecurity Analyst - Financial Service

Information Technology - Cyber Security Lead Engineer

Information Security Analyst Level I or II - SIEM, Tues-Sat 7am-3pm

IT Project Manager / Business Analyst - Securities and Derivatives

Technology & Cyber Security Risk Analyst

Information Security Analyst / IT Support Engineer

Security Incident Management Analyst - AVP - SINGAPORE

Information Technology - Cyber Security Engineer (Threat Management and Incident Response) (Scoot)

Lead Analyst - Global Security Organisation Client Services - TikTok, Singapore

We’re unlocking community knowledge in a new way. Experts add insights directly into each article, started with the help of AI.

Our organization seeks a highly skilled Cyber Security Specialist to join their ranks.

This individual will be responsible for responding to threats and incidents on corporate networks, systems (on-prem and cloud), and digital assets. Key Responsibilities include:

• Acting as the subject matter expert for security systems owned by the security team
• Recommending and driving cyber security solutions and initiatives to improve the organization's posture
• Leading and driving major incidents towards mitigation and resolution in collaboration with internal counterparts
• Ensuring excellent communication with stakeholders, providing timely and accurate updates during incidents

The ideal candidate will have a degree in IT or related fields, at least 6 years of relevant information security working experience, and professional security certifications such as CISSP, CISA, CEH, GCIH, etc.

They will possess strong technical knowledge of Networking, Cloud, Active Directory, Windows, and UNIX platforms, as well as Mitre framework. Strong oral, written, presentation, and interpersonal skills are also essential.

This is an opportunity to work independently and in a team-oriented environment, guiding and mentoring junior staff within a security operations team.