Ensign is hiring !
Key Responsibilities:
Perform in-depth analysis of security events escalated by L1 analysts to determine scope, impact, and appropriate response actions.
Investigate and respond to security incidents, including malware infections, phishing attacks, unauthorized access, and other cybersecurity threats.
Conduct root cause analysis and recommend remediation and preventive actions.
Utilize threat intelligence feeds and tools to enhance the detection and investigation process.
Collaborate with other IT/security teams to contain and resolve incidents.
Maintain and improve incident response runbooks and playbooks.
Assist in tuning and optimizing SIEM rules, correlation logic, and alerts to reduce false positives.
Mentor and support L1 analysts to ensure consistent incident handling practices.
Prepare incident reports and executive summaries for management or customers.
Participate in red/blue team exercises or threat-hunting activities as needed.
Requirements:
Education & Certification:
Degree in Cybersecurity, Computer Science, Information Technology, or a related field.
Relevant certifications are highly preferred: CompTIA CySA+, EC-Council ECIH, GCIA, GCFA, GCIH, etc.
Technical Skills:
Strong understanding of network protocols, log analysis, and cybersecurity frameworks.
Hands-on experience with SIEM platforms (e.g., Splunk, QRadar, LogRhythm).
Familiarity with EDR/XDR tools, IDS/IPS, firewalls, and forensic tools.
Ability to write and optimize detection rules and scripts.
Knowledge of MITRE ATT&CK and threat modeling methodologies.
Ensign InfoSecurity is the largest pure-play end-to-end cybersecurity service provider in Asia. Headquartered in Singapore, Ensign offers bespoke solutions and services to address their clients’ cybersecurity needs. Their core competencies are in the provision of cybersecurity advisory and assurance services, architecture design and systems integration services, and managed security services for advanced threat detection, threat hunting, and incident response. Underpinning these competencies is in-house research and development in cybersecurity. Ensign has two decades of proven track record as a trusted and relevant service provider, serving clients from the public and private sectors in the Asia Pacific region.
