Threat Hunting Analyst (AVP)OCBC · Singapore, Singapore

Threat Hunting Analyst (AVP)

🗓️ Posted 2026-09-28 Singapore, Singapore Full-time Hybrid ICT
💰 Salary Not shared 📊 Market S$15,000–S$24,000/mo

About the Company

As Singapore's longest established bank, we have been dedicated to enabling individuals and businesses to achieve their aspirations since 1932. We provide support, services, solutions, and career paths that meet individual needs and desires. Today, we're on a journey of transformation, leveraging technology and creativity to become a future-ready learning organisation. Our strategic ambition is to be Asia's leading financial services partner for a sustainable future.

About the Role

Protecting our customers' assets and data is at the heart of everything we do at OCBC. As a Cyber Engineer, you'll play a critical role in safeguarding our systems and networks from cyber threats. You'll be part of a team that's shaping the future of cybersecurity in the financial industry. We are seeking a skilled and motivated individual to join our Cyber Threat Intelligence team as a Threat Hunting Analyst. In this role, you will proactively identify hidden threats, suspicious activities, and security gaps across the Bank's environment. You will leverage threat intelligence, attacker TTPs, and security telemetry to uncover malicious activities that may evade existing controls, and work closely with CTI, SOC, Detection Engineering, and Technology teams to strengthen the Bank's security posture.

Responsibilities

  • ● Conduct proactive threat hunting across endpoint, network, cloud, identity, and application environments.
  • ● Develop and execute threat hunting hypotheses based on threat intelligence, attacker TTPs, vulnerabilities, and emerging threats.
  • ● Analyse security telemetry from SIEM, EDR, cloud, identity, and network security platforms to identify suspicious activities and potential security compromises.
  • ● Investigate anomalies identified through threat hunting activities, validate findings using available telemetry, and assess their potential impact on the organisation.
  • ● Collaborate with Detection Engineering to develop or enhance detection use cases based on threat hunting outcomes.
  • ● Support incident investigations by performing retrospective hunting, attacker behaviour analysis, and scoping activities to assess incident impact and scope.
  • ● Identify security control gaps and recommend improvements to strengthen detection and response capabilities.

Requirements

  • ● Degree in Cybersecurity, Information Security, Computer Science, or related discipline.
  • ● Minimum 8 years of experience in Threat Hunting, Security Operations, Detection Engineering, Incident Response, or related cybersecurity functions.
  • ● Strong understanding of cyber attacker tactics, techniques, and procedures (TTPs) and the MITRE ATT&CK framework.
  • ● Hands-on experience with SIEM, EDR, cloud security, and log analysis platforms.
  • ● Strong analytical, investigative, and problem-solving skills.

Nice to Have

  • ● Experience in financial institutions or regulated environments is preferred.
  • ● Relevant certifications such as GCIH, GCIA, GCFA, GMON, GCTI, CISSP, or equivalent are advantageous.

Application Notes

We invite you to build the bank of the future. Innovate the way we deliver financial services. Work in friendly, supportive teams. Build lasting value in your community. Help people grow their assets, business, and investments. Take your learning as far as you can. Or simply enjoy a vibrant, future-ready career. Your Opportunity Starts Here.