Senior OT SOC Analyst – Advanced Cyber Security Engineer

About the role

The Senior OT SOC Analyst will join the Industrial Cyber‑Security team in Singapore, delivering and developing security services for global industrial customers. Reporting to the Global Security Operation Center Manager, the role combines advanced incident investigation, threat analysis, and team leadership within a managed services environment.

Key responsibilities

• Create, implement and monitor standard processes for security monitoring and incident response.
• Develop manuals, guides, knowledge‑base entries and produce reports and presentations for management and customers.
• Monitor KPIs, develop workflows and playbooks for various cyber‑threat scenarios.
• Perform advanced investigations, data‑loss analysis and forensic support, including SIEM monitoring and ticket handling.
• Review and improve control deployment, installation procedures and remediation recommendations for business owners.
• Provide tuning guidance for signatures, rules, alerts, parsers and custom scripts in monitoring solutions.
• Lead, hire, train and mentor Level 1‑3 SOC analysts and act as the L4 escalation point.
• Oversee daily operational monitoring, ensure compliance with customer‑specific procedures and internal policies.
• Stay current with security legislation, emerging threats, advisories and the company’s solution portfolio.

Required profile

• Bachelor’s degree in Computer Science, Information Systems, Electronics or a related field.
• Minimum 5 years of experience in a cyber‑security SOC environment.
• Strong analytical abilities and proven people‑management skills.
• Experience working with industrial control systems and OT environments.

Required skills

• SIEM platforms (monitoring, alerting, log analysis).
• Orchestration and Automation tools.
• Firewalls, IDS/IPS devices.
• Forensic investigation techniques and data‑loss analysis.
• Development of security playbooks, workflows and remediation documentation.
• Tuning of security signatures, rules, alerts, parsers and custom scripts.