Propine logo
Propine

Regulated custody and digital assets services provider for enterprises. Future proofing your institutional crypto needs.

Threat and Incident Response Analyst

Incident Response AnalystSecurity AnalystFull TimeRemoteSeniorTeam 11-50Since 2018H1B No SponsorCompany SiteLinkedIn

Location

Singapore

Posted

67 days ago

Salary

0

Seniority

Senior

Bachelor Degree5 yrs expEnglishCloudCyber SecurityLinuxUnix

Job Description

Threat and Incident Response Analyst

Propine

• Identify and analyze cybersecurity threats impacting the organization's environment. • Responsible for proactively discovering new attacks through the use of advanced security monitoring techniques and tools. • Investigate and respond to identified security incidents using a defined incident response process • Create playbooks and processes to respond to incidents. • Collaborate with the engineering team to automate response to security incidents • Identify emerging threats and ensure the detection and response capabilities of the organization are updated for the latest threat landscape. • Perform threat modeling across the technologies and applications across the organization and ensure that all identified threats have required security controls in place. • Identify data sources and security monitoring use cases relevant to the organization's threat defense requirements and onboard them to the SIEM platform. • Operate and Administer SIEM platform • Utilize security tools like SIEM, EDR, WAF, IDS, Netflow to investigate and respond to threats • Responsible for assessing, curating, and managing Threat intelligence feeds to enable the correlation of security events. • Participates in an on-call rotation for 24x7 support of security operations.

Job Requirements

  • 5-7 years of work experience in the information security industry focused on security/threat analysis and prevention and detection technologies
  • Strong analytical skills and self-motivated to learn and adapt to new technologies and methodologies.
  • In-depth knowledge of technologies like Unix/Linux, Windows, AD, Databases, Cloud, DevOps
  • Experience with endpoint and network security technologies like IDS, IPS, EDR, ATP, Malware defenses
  • Experience with SIEM and Log management technologies
  • In-depth understanding of Cyber Threat TTP's, Threat Hunt methodologies, and the application of the Mitre Attack framework
  • Experience with scripting languages
  • Well versed with threat modeling methodologies like STRIDE, PASTA
  • Ability to communicate and collaborate effectively with technical and non-technical team members in different geographies and a fast-paced work environment.

Related Job Pages

More Incident Response Analyst Jobs

Nielsen logo

Cybersecurity IR Analyst

Nielsen

Powering a better media future for all people

Full TimeRemoteTeam 10,001+Since 1923H1B Sponsor

• Investigating, responding to, and triaging threats and incidents while helping to improve overall security capabilities. • Communicate and collaborate professionally with other members of the organization from end users to senior management in order to resolve threats.

Iran
zł126K - zł210K / year
Job Closed
Full TimeRemoteTeam 10,001+Since 1968H1B Sponsor

TransUnion's Job Applicant Privacy Notice What We'll Bring: We Are TransUnion: TransUnion is a major credit reference agency, and we offer specialist services in fraud, identity and risk management, automated decisioning and demographics. We support organisations across a variety of sectors including finance, retail, telecommunications, utilities, gaming, government and insurance. What You'll Bring: We’re looking for a Incident Coordinator - Dutch speaking to join our growing Sontiq team. Day to Day You’ll Be: Customer Service: - Screen and interview clients by telephone to compile information regarding breach/fraud and/or identity theft - Examine and analyse information to determine the severity of the fraud, breach and/or identity theft - Exercises independent judgment in setting priorities to ensure that deadlines and due dates are met - Provide professional and courteous customer service and expert assistance to clients and victims of a breach/fraud and/or identity theft - Manage customer and client expectations - Act as point of contact for customer, client and internal experts - Gather, assemble and preserve facts, statements or affidavits and other evidence for use in breach remediation and resolving fraud and identity theft issues and claims - Prepare letters, initiate telephone communications and acts as a liaison to creditor, law enforcement and government agencies - Communicate clearly to customer the services and support offered - Consults with potential and existing clients on breach incidents to determine if remediation is necessary and the requirements of the remediation. - Escalates and refers any incidents that require assistance from other internal departments, coordinates the discussions, meetings and updates Administrative: - Identify, report, and articulate on current trends and unique client or customer situations to both internal and external parties - Maintain current knowledge of all new laws and regulations pertaining to breach and identity theft - Prepares written proposals for breach services that fit the situation - Participates in project plan schedule development, monitoring and reporting - Directs document and data transfers between company and clients - Manage mailings: scrubbing data, producing letters, obtaining client approval and coordinating the delivery to mailing service - Ensures timely communication to internal team members, clients and other 3rd parties such as client’s counsel - Records and details relevant case notes into database with strong attention to detail and accuracy of information in a timely manner - Ensures the closure of all resolved and confirmed Incident records and final report to the client /customer - Accountable for the overall breach/fraud incident process efficiency and effectiveness - If applicable, language translation for correspondence, reports , training documents, other internal documents as necessary - If applicable, live Language interpretation between clients and internal departments regarding sales support, client training and incident management support calls with Forensic and Privacy experts Essential Skills & Experience: - Must be fluent in Dutch and English (Written and Verbal) - Experience in Customer Service Impact You'll Make: What’s In It For you? At TransUnion you will be joining a friendly, forward thinking global business. As well as an excellent salary and bonus scheme or commission scheme (if joining our sales teams) our benefits package comes with: - 26 days’ annual leave + bank holidays (increasing with service) - Global paid wellness days off + a bonus day off to celebrate your birthday - A generous contributory pension scheme + access to the TransUnion Employee Stock Purchase Plan - Private health care + a variety of physical, mental and financial fitness wellbeing programmes such as access to mindfulness tools - Access to our diversity forums and communities so you can get involved in causes close to your heart TransUnion – a place to grow: If there’s something on the list of essential / desirable skills that you can’t quite tick off, don’t let that put you off applying. We are open to exploring training and development opportunities for the right candidate to ensure you are successful. We know imposter syndrome is real, lets confront it so we can continue to grow and thrive together Flexibility at TU: We recognise that our people need the freedom to balance their day-to-day lives with their work. This is why we’ve set out to create inclusive and flexible policies and practices for you to accommodate all your responsibilities and needs: children, family and beyond. If the role is advertised as full time, don’t let this stop you from applying. Let us know if you’re looking for a part time or flexible working arrangement and we can discuss this with you. Additional support: At TransUnion, we’re committed to fostering an inclusive and diverse workplace where all individual’s talents and perspectives are valued. When you apply for a position with us, you’re not just joining a team, you’re becoming part of a community that celebrates differences and embraces equality. We understand that everyone has different needs, which is why we offer a range of reasonable adjustments to our recruitment process. Please let us know if you require any reasonable adjustments to help you through the application process or to attend an interview with us by contacting ukrecruitment@transunion.com Interview & Hiring Process: Most of our recruitment processes are virtual, so you’ll get to know our hiring managers and teams over the phone and through video. If we need you to attend a physical in person interview your recruiter will inform you of this. We do not accept any unsolicited CV’s from recruitment agencies. If you are a recruitment agency on our PSL our talent team will contact you directly should we require any assistance. #LI-Remote Find out more about Life At TU UK: https://twitter.com/TransUnionUK https://www.linkedin.com/company/transunion/life/ TransUnion Job Title Specialist I, Customer Support Operations

United Kingdom
Job Closed
Allstate logo

Major Incident Availability Expert

Allstate

National General Insurance, a division of Allstate, describes itself as one of the largest insurers in the United States. The company provides personal and commercial auto, recreat

Role Description The Service Management Expert leads all efforts to develop, document, implement, and drive the activities around managing our Technology Services and will conduct monitoring for process/Inventory accuracies through the use of internal controls, metrics and reporting. The Service Management Expert will be responsible to set the Technology Services Management Strategy for all of ATS and will work across multiple IT/Internal groups to ensure that the Enterprise Process Management approach is effectively managed and maintained from a governance and on-going operations perspective. Key Responsibilities - Oversee the development and delivery of Executive Level communications relevant to the Technology Services, process performance, process maturity or technology aligned to strategic objectives and business needs. - Oversee the communication, marketing, and training for one or more Technology Services. - Oversee the escalation / communication of risks and issues as appropriate. - Oversee and drive industry and internal benchmarking to ensure fit for purpose and best in class process delivery / execution. - Oversee the design, implementation and/or coordination for one or more Technology Services' policies, roles and responsibilities, and compliance. - Accountable for one or more Technology Services within Allstate and for the performance, maturity, and compliance of the ITSM Process. - Oversee and determine the tools and processes to gather and create Technology Services requirements or process improvements. - Oversee and drives Continual Service Improvement across one or more Technology Services. - Understand advanced concepts and navigate the relationships between Technology Services, IT Service Management Process requirements, and business/IT management needs that are moderate to complex in nature which may span multiple Technology Services. - Act as the authoritative source of knowledge for one or more Technology Services. Qualifications - 7 or more years of experience (Preferred) Requirements - This job does not have supervisory duties. Skills - Accountability - Business - Communication - Compliance - Design - Information Technology (IT) Services - Information Technology Management - IT Service Management (ITSM) - People Management - Problem Solving - Process Improvements - Process Management - Team Management - Time Management - Waterfall Model Compensation Compensation offered for this role is 85,000.00 - 145,075.00 annually and is based on experience and qualifications. Additional Information - The candidate(s) offered this position will be required to submit to a background investigation. - Allstate generally does not sponsor individuals for employment-based visas for this position. - Effective July 1, 2014, it is against public policy of the State of Indiana to discriminate against a prospective employee on the basis of status as a veteran.

United States
$85K - $145.1K / year
Huntress logo

Director, Product Security & Incident Response

Huntress

Managed endpoint protection, detection and response for the 99% who need it most.

Full TimeRemoteTeam 201-500Since 2015H1B No Sponsor

Reports to: CISO Location: Remote US Compensation Range: $220,000 to $240,000 base plus bonus and equity What We Do: Huntress is a fully remote, global team of passionate experts and ethical badasses on a mission to break down the barriers to cybersecurity. Whether creating purpose-built security solutions, hunting down hackers, or impacting our community, our people go above and beyond to change the security game and make a real difference. Founded in 2015 by former NSA cyber operators, Huntress protects all businesses—not just the 1%—with enterprise-grade, fully owned, and managed cybersecurity products at the price of an affordable SaaS application. The Huntress difference is our One Team advantage: our technology is designed with our industry-defining Security Operations Center (SOC) in mind and is never separated from our service. We protect 4M+ endpoints and 7M+ identities worldwide, elevating underresourced IT teams with protection that works as hard as they do. As long as hackers keep hacking, Huntress keeps hunting. What You’ll Do: As the Director of Product Security and Incident Response, you will protect Huntress from the adversaries we wreck daily with our products. You will be responsible for managing our attack surface, ensuring it is free of vulnerabilities, preparing our organization for incident response, and owning the offensive security team. This role will partner closely with the CISO and our Product and Engineering teams, and our Security Operations Center. Responsibilities: Strategic Leadership: - Unified Security Vision: Develop and execute a roadmap that integrates the Secure SDLC with continuous adversary simulation. Ensure that findings from Offensive Security (Red Team) exercises are directly incorporated into the Product Security backlog. - Board-Level Communication: Translate complex technical metrics (Drift, Detection Coverage) into business risk narratives for the executive leadership team (ELT) and the Board of Directors. - Talent Development: Recruit, mentor, and retain top-tier talent in highly competitive fields (Offensive Security, AppSec). Build a culture of psychological safety where failure is viewed as a learning opportunity. Adversary Informed Defense: - Resilience Testing: Lead the Offensive Security team to conduct "Threat-Led Defense" operations. Simulate realistic APT campaigns to test the organization's ability to withstand and recover from attacks. - CSIRT Readiness: Own the Incident Response capability for the company. Drive continuous improvement in incident response through rigorous drilling and automation. - Drift Management: Implement automated systems to measure and remediate Configuration Drift and Detection Drift across the enterprise. - Purple Teaming: Institutionalize collaboration among Offensive Security Analysts, CSIRT analysts, the broader Security Department, and other parts of the company to validate and tune detection logic in real time. Product Security: - Secure Infrastructure: Direct the security architecture for our cloud-native environment (AWS and Azure), ensuring immutable infrastructure and strict IAM governance. - Vulnerability Management (VM): Oversee a risk-based VM program that prioritizes remediation based on exploitability and asset criticality. - Regulatory Alignment: Ensure the product architecture supports SOC 2 and other regulatory requirements through partnership with our Governance team. - AppSec Integration: Champion the use of automated security testing (SAST/DAST/SCA) within our engineering pipelines. What You Bring To The Team: - Minimum of 10+ years of progressive experience in Information Security, with at least 5 years in a senior leadership role (Director/VP) managing multi-disciplinary teams (e.g., Offensive Security, AppSec, Incident Response). - Demonstrable experience developing and executing a multi-year security roadmap that aligns technical controls with enterprise business objectives and risk tolerance. - Proven ability to communicate complex technical risks and metrics (e.g., detection coverage, drift rate, remediation velocity) to executive leadership (ELT) and the Board of Directors, effectively translating security posture into business language. Technical and Programmatic Expertise: - Deep, hands-on experience leading and maturing an Offensive Security (Red Team) function, specifically conducting Adversary Simulation and Threat-Led Defense operations. - Expertise in Cloud-Native Security Architecture across major providers (AWS and/or Azure) - Extensive experience designing, implementing, and running a risk-based Vulnerability Management (VM) program at scale. - Comprehensive knowledge of Secure Software Development Lifecycle (SSDLC) principles, including the successful implementation and integration of automated security testing tools (SAST, DAST, SCA) into CI/CD pipelines. - Expert-level understanding of Incident Response (IR) and CSIRT operations, including owning the IR process, coordinating complex incidents, and driving continuous improvement through post-mortem analysis and rigorous drilling. - Direct experience with "Purple Teaming" methodologies to improve the efficacy of detection and response capabilities in collaboration with security engineering and operations teams. Leadership and Culture: - Exceptional talent acquisition, development, and retention skills, with a focus on mentoring high-performing, specialized security professionals in highly competitive domains (e.g., Offensive Security, AppSec). - Demonstrated ability to build a positive, high-trust team culture that emphasizes psychological safety, continuous learning, and cross-functional collaboration. - Proven ability to drive consensus and influence change across engineering and product organizations without direct authority. - Experience in aligning security practices with regulatory and compliance frameworks such as SOC 2, ISO 27001, or similar. What We Offer: - 100% remote work environment - since our founding in 2015 - Generous paid time off policy, including vacation, sick time, and paid holidays - 12 weeks of paid parental leave - Highly competitive and comprehensive medical, dental, and vision benefits plans - 401(k) with a 5% contribution regardless of employee contribution - Life and Disability insurance plans - Stock options for all full-time employees - One-time $500 reimbursement for building/upgrading home office - Annual allowance for education and professional development assistance - $75 USD/month digital reimbursement - Access to the BetterUp platform for coaching, personal, and professional growth Huntress is committed to creating a culture of inclusivity where every single member of our team is valued, has a voice, and is empowered to come to work every day just as they are. We do not discriminate based on race, ethnicity, color, ancestry, national origin, religion, sex, sexual orientation, gender identity, disability, veteran status, genetic information, marital status, or any other legally protected status. We do discriminate against hackers who try to exploit businesses of all sizes. Accommodations: If you require reasonable accommodation to complete this application, interview, or pre-employment testing or participate in the employee selection process, please direct your inquiries to accommodations@huntresslabs.com. Please note that non-accommodation requests to this inbox will not receive a response. Huntress uses artificial intelligence tools to assist in reviewing and evaluating job applications, including resume screening, skills assessment, and candidate matching and comparisons. These AI tools support our human recruiters in the initial review process but do not make final hiring decisions without human involvement. By submitting your application, you acknowledge this use of AI in our recruitment process. Please review our Candidate Privacy Notice for more details on our practices and your data privacy rights. #BI-Remote

United States
$220K - $240K / year
Job Closed