IT Security Analyst, Financial Services

About the role

Join a leading financial services organisation’s Singapore security team as an IT Security Analyst. You will be responsible for day‑to‑day security monitoring, investigation and response, working closely with an external managed SOC while focusing on the Microsoft security ecosystem.

Key responsibilities

• Validate, triage and respond to security alerts generated by Microsoft Sentinel and Defender XDR.
• Develop, tune and maintain detection rules using KQL and create investigative workbooks.
• Conduct end‑to‑end incident investigations across endpoint, identity, cloud and network telemetry.
• Support incident containment, remediation and post‑incident reporting using frameworks such as MITRE ATT&CK.
• Contribute to vulnerability management, threat intelligence, security awareness and management reporting.
• Assess the performance of the managed SOC and continuously improve detection quality and operational processes.

Required profile

• Minimum 4 years of hands‑on incident response experience, preferably in a regulated or financial services environment.
• Strong practical experience with Microsoft Sentinel, including analytics rule development and KQL query writing.
• Hands‑on knowledge of Microsoft Defender XDR, Entra ID and Conditional Access.
• Experience applying MITRE ATT&CK or similar threat‑model frameworks.
• Exposure to Azure security, vulnerability management, network/DNS security tools, and scripting (PowerShell or Python) is advantageous.

Required skills

• Microsoft Sentinel
• KQL (Kusto Query Language)
• Microsoft Defender XDR
• Entra ID & Conditional Access
• MITRE ATT&CK framework
• Azure security tooling
• PowerShell scripting
• Python scripting