Staff Cybersecurity Threat Analyst

About the role

PayPal is hiring a Staff Cybersecurity Threat Analyst in Singapore to strengthen its security posture by leading incident response and applying digital forensics expertise to protect its infrastructure, systems and data. The role coordinates cross-functional response with infrastructure, application, legal, compliance and risk teams, contributes to incident readiness through exercises and simulations, develops incident response playbooks, mentors junior analysts and provides regional coverage.

Key responsibilities

• Lead security incidents and act as incident commander during Singapore business hours, coordinating detection, triage, containment, eradication and recovery
• Conduct digital forensics: collect and preserve evidence, perform host-based forensics on Windows, macOS and Linux, and correlate SIEM, EDR, firewall, network, VPN and proxy logs to build incident timelines
• Create forensic and investigative reports for senior leadership, legal counsel and regulators, and run post-incident reviews
• Develop and maintain incident response playbooks, SOPs and forensic protocols, and keep the incident tracking system up to date
• Work with legal, compliance and regulatory stakeholders, and with third-party vendors and intelligence groups
• Mentor junior analysts and take part in the Singapore on-call rotation

Required profile

• 5+ years of relevant experience and a Bachelor's degree, or an equivalent combination of education and experience
• Demonstrated experience in security incident handling and security operations within a SOC or similar high-tempo environment

Required skills

• Strong digital forensics, including host-based forensics, evidence preservation, chain of custody and data breach response
• Proficiency analyzing forensic artifacts across Windows, macOS and Linux
• Event correlation across SIEM, EDR, firewall, network traffic, VPN and proxy logs
• Solid hands-on knowledge of SIEM and EDR