IT Security Specialist - Cyber Threat Intelligence & SOC Engineering

About the role

HDB is hiring an IT Security Specialist to join its Security Operations Centre (SOC) team. You will safeguard HDB's ICT infrastructure by providing timely threat intelligence and by engineering and maintaining the SOC's security operations capability through the right tools, platforms and technologies.

Key responsibilities

• Cyber threat intelligence: continuously monitor and analyse threat feeds, vendor data, dark web forums and social media to identify emerging threats and attack trends, prioritise them and produce regular reports, briefings and alerts for stakeholders.
• On a rostered 24/7 standby basis, support incident response teams during security incidents with threat assessment, containment, remediation and recovery guidance.
• Support vulnerability management by identifying vulnerabilities and exploit trends and prioritising patching and mitigation.
• SOC engineering: research and evaluate new security tools, liaise with vendors for proof-of-concept and technical evaluation, procure and implement tools, and hand over operations to the SOC team.
• Process innovation: design and refine SOC processes, and implement automation and AI solutions to improve threat detection and response.
• Take part in SOC activities such as security monitoring, threat hunting and incident response.

Required profile

• Demonstrable experience and in-depth knowledge of cyber threat intelligence analysis and SOC engineering.
• At least 2 years as an engineer or cyber intelligence analyst in a SOC environment or an equivalent cybersecurity engineering/operations role.
• Experience in cyber intelligence analysis, implementing security monitoring and detection solutions, and project management.
• Strong analytical and problem-solving skills, able to work under pressure and meet critical deadlines.
• Strong written and verbal communication, able to explain technical concepts to diverse stakeholders.

Required skills

• Cybersecurity technologies: IDS/IPS, firewalls, SIEM, email security, web security, cloud security and endpoint security.
• Professional certifications such as EC-Council CTIA, SIEM, SOAR and XDR/EDR product certifications, or other relevant cybersecurity qualifications.
• Good to have: cloud security frameworks, modern security orchestration tools, and autonomous, collaborative work style.

Successful candidates will be offered a 1+1 year contract in the first instance.