Senior SOC Engineer (GTS - Command Centre)

About the role

OCBC is looking for a Senior SOC Engineer to join its Cyber Security Operations team. You will be responsible for engineering and enhancing SOC capabilities, focusing on threat detection, automation, and AI‑assisted workflows.

Key responsibilities

• Develop and maintain SOAR playbooks, automation workflows and AI‑assisted SOC processes for alert triage, enrichment, correlation, investigation and response.
• Design automated enrichment and correlation workflows to improve investigation context and reduce manual analysis.
• Review detection effectiveness, false positives, coverage gaps and recurring alert patterns, recommending improvements.
• Lead development, validation and fine‑tuning of detection use cases, SOAR playbooks and AI‑assisted workflows.
• Manage integration of SOC tools and data sources to improve alert enrichment, event correlation and automation reliability.
• Drive troubleshooting of detection issues, broken playbooks, failed automations, data quality problems and platform constraints.
• Optimize usage of SOC tools, evaluate new technologies and build repeatable engineering processes for monitoring, detection, analysis, escalation and remediation.
• Track and report effectiveness of SOC engineering enhancements such as playbook adoption and analyst effort reduction.

Required profile

• Proven experience in a cyber security operations environment, preferably within a financial institution.
• Strong background in building scalable, repeatable and measurable SOC capabilities.
• Ability to work independently, lead technical initiatives and provide guidance to SOC analysts.

Required skills

• SOAR platforms
• Automation workflow development
• AI‑assisted security processes
• SOC tooling integration

What we offer

• Opportunity to shape the future of cybersecurity in a leading Asian bank.
• Collaborative and supportive team environment.
• Access to cutting‑edge technologies and continuous learning.