Back to jobs

TD Securities

Information Security Analyst (CSOC)

🗓️ Posted 2026-08-14 Singapore Permanent ICT

Company shared salary

NA

Market rate

NA

Based on similar roles (title + domain + location).

Responsibilities

  • ● The Information Security Analyst is responsible for tier 1/tier 2 triage, investigation, and incident response for Cyber security incidents.
  • ● Conduct Real-time analysis on identified cyber incidents currently impacting the bank's operations.
  • ● Analyze, triage and remediate security incidents internally and/or escalate to Cyber Security Incident Response team for further investigation, treatment or support if needed.
  • ● Manage intake of incidents and reports from internal customers through internal ticketing system in a timely accurate manner in order to resolve a multitude of information security related situations.
  • ● Identify and triage and remediate security incidents such as Malware, Phishing and Web Attacks.
  • ● Support the event log monitoring, analysis needs of customers.
  • ● Work as part of a cyber security operations team responsible for carrying out 24x7 on-site security monitoring operations.
  • ● Respond to, investigate and remediate cyber threats to the bank.
  • ● Escalate to internal and Cyber Security Incident Response team if required.
  • ● Manage information between multiple technical teams, the CSOC, CSIRT and ITS, LOB TS when appropriate.

Requirements

  • ● Min 3 years of Information Security Operations or similar working experience
  • ● Understanding of security controls/mechanisms and threat/risk assessment techniques pertaining to complex data, application and networking environments.
  • ● Excellent written and oral communication skills.
  • ● Organizational and self-directing skills - ability to initiate, coordinate and prioritize responsibilities and follow through on tasks to completion.
  • ● An approach to work that includes initiative, sound judgment, diplomacy and Discretion.
  • ● Ability to work independently on a variety of assignments with minimal supervision.
  • ● Ability to work without supervision with senior managers, supervisors, VIPs and Users.
  • ● Advanced knowledge of security incident and event management, log analysis, Network traffic analysis, Malware investigation and remediation, SIEM correlation logic and alert generation.
  • ● Ability to perform analysis and reporting on information from multiple data sources using data mining technique for the purpose of documenting analysis results, produce report and present to a technical and executive stakeholders.
  • ● Understanding of Security principles, techniques and technologies such as SANS Top 20 Critical Security Controls and OWASP Top 10.
  • ● A background with Cloud Security Monitoring is highly desired, preferably with Azure Security Center, Microsoft MCAS, AWS.
  • ● Basic programming skills in various disciplines including scripting languages.
  • ● Strong hands-on experience with traditional incidents response detection tools such as SIEM, EDR, XDR, Firewall, WAF, NIDS and equivalent.
  • ● Experience with Security Orchestration, Automation and Response tools.
  • ● Demonstrate expert knowledge in Enterprise IT operations, incident management, change management, Access/Identity Management, Security Operations, vulnerability and compliance management, ticketing system, incident ticket life cycle and SLA terms
  • ● Completion of a Bachelor's degree or equivalent