Threat Hunting Analyst (AVP)

About the role

OCBC is seeking an experienced Threat Hunting Analyst at the AVP level to proactively uncover hidden threats across its digital environment. You will work closely with the Cyber Threat Intelligence, SOC, Detection Engineering and technology teams to strengthen the bank’s security posture.

Key responsibilities

• Conduct proactive threat hunting across endpoint, network, cloud, identity and application environments.
• Develop and test hunting hypotheses using threat intelligence, attacker TTPs, vulnerabilities and emerging threats.
• Analyze security telemetry from SIEM, EDR, cloud, identity and network security platforms to detect suspicious activity.
• Investigate anomalies, validate findings and assess potential impact on the organization.
• Collaborate with Detection Engineering to create or improve detection use cases based on hunting outcomes.
• Support incident investigations through retrospective hunting, attacker behavior analysis and scoping.
• Identify security control gaps and recommend enhancements to detection and response capabilities.

Required profile

• Degree in Cybersecurity, Information Security, Computer Science or a related discipline.
• Minimum 8 years of experience in threat hunting, security operations, detection engineering or incident response.
• Strong understanding of attacker tactics, techniques and procedures (TTPs) and threat intelligence.

Required skills

• SIEM platforms (e.g., Splunk, QRadar)
• Endpoint Detection and Response (EDR) tools
• Cloud security platforms (e.g., AWS, Azure, GCP security services)
• Identity and access management security solutions
• Network security monitoring tools