Cyber Security Analyst Security Operations (Private Banking)

Our client, a leading private banking institution, is seeking a Cyber Security Analyst to join its security operations function in strengthening the organisation's cyber defence and information security capabilities.

The successful candidate will play a key role in monitoring security events, investigating potential threats and supporting incident response activities across the organisation's technology environment.

You will work closely with regional technology, infrastructure, cloud and security teams to identify emerging cyber threats, enhance detection capabilities and safeguard critical banking systems, sensitive client information and financial data.

This is an excellent opportunity for a security professional looking to deepen their exposure to cyber defence, threat detection and incident response within a highly regulated financial services environment.

Security Monitoring & Threat Detection

1. Monitor and analyse security events across SIEM and other security monitoring platforms.
2. Investigate and triage security alerts, prioritising potential threats based on severity, business impact and risk exposure.
3. Identify suspicious activities, potential security breaches and indicators of compromise across the banking technology environment.
4. Ensure timely escalation and handling of security events in accordance with established procedures.

Security Incident Investigation & Response

1. Investigate potential cyber security incidents, including suspicious access, malware activity, phishing attempts and unauthorised system activities.
2. Assess incident scope, affected systems, user identities and potential exposure of sensitive information.
3. Support incident containment, remediation and recovery activities in collaboration with relevant technology and security teams.
4. Maintain accurate incident records, investigation timelines and supporting evidence.

Security Detection & Use-Case Development

1. Develop, test and maintain security detection rules and monitoring use cases.
2. Review and optimise existing detection logic to improve threat coverage and minimise false positives.
3. Enhance detection capabilities based on incident findings, emerging attack techniques and threat intelligence.

Threat Hunting & Intelligence

1. Conduct proactive threat hunting to identify suspicious activities and potential security threats.
2. Analyse threat intelligence and Indicators of Compromise (IOCs) to identify relevant threats to the organisation.
3. Develop and refine threat-hunting queries to strengthen detection and monitoring capabilities.

Vulnerability & Security Risk Management

1. Review vulnerability assessments and security configuration findings.
2. Assist in prioritising vulnerabilities based on severity, system criticality and potential business exposure.
3. Coordinate with infrastructure, application and cloud teams to track remediation progress and escalate outstanding risks.

Security Controls & Regulatory Support

1. Perform operational security checks against established information security policies and control requirements.
2. Support security control reviews and regulatory or internal audit exercises through evidence gathering and documentation.
3. Identify control gaps and work with relevant stakeholders to support corrective actions.

Security Operations & Continuous Improvement

1. Support the onboarding and optimisation of security log sources and monitoring capabilities.
2. Collaborate with regional technology and security teams to improve security visibility and operational effectiveness.
3. Contribute to automation initiatives, operational documentation and continuous improvement of security processes.

1. 2–4 years of relevant experience in Cyber Security, Security Operations Centre (SOC), Cyber Defence or Incident Response.
2. Experience working with SIEM platforms and security event monitoring tools.
3. Familiarity with EDR, network security, identity and access security, cloud security or email security technologies.
4. Good understanding of cyber threats, attack techniques, threat intelligence and Indicators of Compromise (IOCs).
5. Exposure to security incident investigation, threat hunting, detection engineering or vulnerability management.
6. Understanding of information security practices within financial services or other regulated environments would be advantageous.
7. Strong analytical, problem-solving and investigative skills.
8. Good communication skills and ability to collaborate with regional technology and security stakeholders.
9. Scripting, security query languages or automation experience will be an added advantage.

Application Process:

Interested candidates should submit their resume to Oliver Lim at[email protected] , quoting the job title. Only shortlisted candidates will be contacted.

License No: 24S2395

Registration No: R1657051