Cybersecurity Analyst / SOC Analyst L2

COMPANY DESCRIPTION

Beyondsoft International (Singapore) Pte. Ltd. was set up in 2007 and established as the regional headquarters for the Southeast Asia (SEA) and European markets in September 2015. Based on our vision of "Using technology to promote social progress, economic development and become a global customer preferred partner" and our concept of "Beyond your expectations", Beyondsoft is committed to provide our customers in countries along the "Belt and Road" with comprehensive solutions and products and creating commercial value for customers to realizing continuous businesses development.

Our core business includes:

1. IT development services providing customers with IT consulting, software research and development, software and hardware testing, system integration and operation and maintenance, data analysis and other services;
2. New retail solutions and products through intelligent products, helping small and medium-sized enterprises (SMEs) realize the digital transformation of their daily operations;
3. Internet of Things (IoT) platform and solutions comprehensive use of IoT, artificial intelligence, big data, cloud computing and other technologies to provide IoT solutions for intelligent upgrades in cities, parks, buildings and industries, to create a smart future.

For more information, please visit www.beyondsoft.com.

RESPONSIBILITIES

Responsibility

• Perform L2 triage and investigation of security alerts across SIEM, EDR/XDR, email, identity, network, and cloud platforms
• Correlate events to identify root cause, scope, and impact of security incidents
• Investigate phishing, malware, account compromise, and unauthorised access cases
• Conduct proactive threat hunting using threat intelligence and MITRE ATT&CK framework
• Support containment, remediation, and recovery activities during incidents
• Document investigation findings and prepare incident reports for stakeholders
• Escalate complex or high severity incidents to L3 or relevant teams with clear handover notes
• Monitor security dashboards and respond to alerts within defined SLAs
• Assist in vulnerability assessment and coordinate patching with relevant teams
• Contribute to SOC improvements (playbooks, detection tuning, onboarding of new tools)
• Stay updated on emerging threats, attack techniques, and security trends
• Work closely with IT, infrastructure, and other teams during incident response

Qualification

• Degree or Diploma in Cybersecurity, IT, or related field
• At least 4 years of experience in SOC operations or incident response (L2 preferred)
• Experience with SIEM, EDR/XDR, and cloud or identity security tools
• Strong understanding of attack chains, MITRE ATT&CK, and threat analysis
• Demonstrated hands on experience in incident investigation or threat hunting
• Familiar with common cloud platforms such as AWS, Azure, or GCP
• Good knowledge of networking concepts and protocols (TCP/IP, DNS, HTTP, etc)
• Strong analytical and problem solving skills
• Good communication skills to work with cross functional teams
• Relevant certifications such as CompTIA Security+, CEH, or GCIH are a plus
• Ability to operate independently in a SOC environment