Incident Response Analyst (DSC|SN)

Job ID: 22332

Location:

ST Engineering Jurong East Bui, SG

#job-location.job-location-inline { display: inline; }

Description:

ST Engineering is a global technology, defence, and engineering group with offices across Asia, Europe, the Middle East, and the U.S., serving customers in more than 100 countries. The Group uses technology and innovation to solve real-world problems and improve lives through its diverse portfolio of businesses across the aerospace, smart city, defence, and public security segments.

Join our Cyber Team

We are an industry leader in cybersecurity with over two decades of experience, we deliver a holistic suite of trusted cybersecurity solutions to empower cyber resilience for government and ministries, critical infrastructure, and commercial enterprises. Backed by our indigenous capabilities and deep domain expertise, we offer robust cyber-secure products and services in cryptography, cybersecurity engineering, digital authentication, SCADA protection, audit and compliance. We specialise in the design and build of security operations centres for cybersecurity professionals and provide managed security services to strengthen the cybersecurity posture of our government and enterprise customers.

Committed to building up competencies of cybersecurity professionals to support the growing demand, our Cybersecurity Academy has certified and trained more than 2000 cybersecurity professionals in more than 150 organisations. We continue to innovate through our Research Lab, Strategic Technology Centre, and Engineering Centres and develop future-ready cybersecurity solutions that position us at the forefront of the dynamic digital economy.

We are looking for a hands-on and detail-oriented Incident Response Analyst who thrives in a fast-paced SOC environment. The candidate should be able to quickly assess alerts, perform structured investigations, and support incident response activities from initial detection through remediation. This role is best suited for individuals with strong SOC and incident response experience, with digital forensics as a complementary skill.

Key Responsibilities

Investigate escalated cybersecurity alerts from SIEM, MDR, and other security tools, performing log, malware, and forensic analysis to determine root cause and impact

Triage alerts to assess severity and business impact, escalating confirmed or high-risk incidents in line with defined response procedures

Support the full incident response lifecycle, including detection, analysis, containment, eradication, recovery, and post-incident review

Coordinate with IT, infrastructure, and business stakeholders to drive containment and remediation actions, providing timely updates throughout the incident lifecycle

Perform basic to intermediate forensic investigations, including evidence collection, preservation, and timeline analysis

Analyse endpoint artefacts, logs, and EDR telemetry to identify attacker behaviour, persistence mechanisms, and scope of compromise

Document investigation activities, findings, and actions, contributing to incident reports, root cause analysis, and lessons learned, while maintaining proper documentation and chain-of-custody practices where required

Support threat hunting activities using indicators of compromise (IOCs), threat intelligence, and observed attack patterns

Provide feedback on detection logic, playbooks, escalation criteria, and SOC processes to enhance detection and response effectiveness

Contribute to continuous improvement of incident response and security operations capabilities

Required Skills & Experience

Possess relevant technical field with at least 3 years of experience in SOC operations, incident response, or cyber defence

Strong understanding of cyber threats, attack techniques, and incident response frameworks (e.g., MITRE ATT&CK, Cyber Kill Chain