senior cybersecruity operation

Role OverviewWe are seeking a highly skilled and proactive SOC Specialist / Senior Analyst based in Singapore to drive robust security monitoring, threat detection, and incident response operations. This role will support security operations for Banxa as well as our global group entities. The ideal candidate will safeguard our multi-entity digital asset infrastructure, ensuring 24/7 defense against evolving cyber threats in a fast-paced fintech and crypto ecosystem.Key ResponsibilitiesThreat Monitoring & Incident Response: Conduct real-time security monitoring, log analysis, and threat hunting across cloud environments (AWS/GCP), corporate networks, and endpoints. Lead containment, eradication, and post-incident remediation efforts.Cross-Entity Security Operations: Manage and streamline SOC workflows across Banxa and broader group business units, maintaining consistent security baselines and SLA standards.SIEM & Security Tooling: Manage, fine-tune, and optimize SIEM, EDR, SOAR, and cloud security posture management (CSPM) platforms to reduce false positives and improve Detection & Response capabilities.Vulnerability Management: Perform routine vulnerability scans, prioritize risks based on exploitability, and collaborate with DevOps/Engineering teams to ensure timely patching and remediation.Incident Escalation & Reporting: Maintain detailed incident logs, write thorough Post-Mortem reports, and present metrics/threat intelligence to senior engineering and security leadership.Process Automation: Build SOAR playbooks and automation scripts (Python, Bash, or PowerShell) to streamline routine SOC triage and incident response.RequirementsWork Authorization: Must be eligible to work legally in Singapore without requiring immediate sponsorship, or open to local employment setup (Non-Mainland China / Non-Hong Kong nationality/citizenship preferred to meet specific operational localization strategy).Experience: 3–6+ years of hands-on experience in SOC analysis, Incident Response, or Security Engineering within Fintech, Web3/Crypto, or high-growth tech firms.Technical Proficiency:Strong expertise with cloud-native SIEM/EDR tools (e.g., Datadog, AWS GuardDuty, CrowdStrike, Splunk, Sentinel).In-depth understanding of network protocols, cloud architecture (AWS/GCP), and modern attack vectors (MITRE ATT&CK framework).Familiarity with crypto-specific security risks (e.g., hot/cold wallet security, API integrations, Web3 infrastructure threats).