Cyber Defence Automation Analyst

Singtel is where Technology meets Purpose.

We're building an AI-first telco for the future—connecting people, businesses and communities through trusted networks, intelligent digital services and next-generation technology.

From transforming everyday experiences in mobile, broadband, entertainment and lifestyle services to enabling enterprises with AI, 5G+, cloud, cybersecurity, data centres and digital platforms, we create the technology that powers how millions live, work and connect.

At Singtel, your work creates real impact. You'll solve meaningful challenges, shape critical digital infrastructure and help build secure, resilient and AI-enabled solutions that serve businesses, digital ecosystems and communities across the globe.

This is where BIG Possibilities become reality. Whether you're engineering intelligent networks, advancing sovereign AI cloud platforms, strengthening cybersecurity, designing seamless customer experiences or driving sustainable innovation, you'll be part of teams shaping the future of technology.

Backed by decades of expertise and driven by a culture of continuous learning and innovation, Singtel offers the scale, opportunities and support to help you grow your career while making a difference where it matters most.

Be a Part of Something BIG!

Join our Cyber Defence Operations team and play an important role in safeguarding Singtel Singapore's systems, networks and digital services against cybersecurity threats.

As a Cyber Defence Automation Analyst, you will be responsible for monitoring and analysing cybersecurity alerts, identifying security issues, gaps and risks, and recommending appropriate solutions to strengthen our security operations. You will also contribute to improving operational efficiency by developing automation using Security Orchestration, Automation and Response (SOAR) platforms and/or Artificial Intelligence (AI) technologies to reduce repetitive tasks, minimise alert fatigue and enhance security monitoring effectiveness.

Make an Impact by:

1. Security Monitoring

• Monitor and analyse cybersecurity alerts, events and activities across security monitoring platforms.
• Perform alert triage and initial investigations to identify suspicious activities, potential security threats and operational abnormalities.
• Correlate relevant logs, security telemetry and contextual information to understand identified issues.
• Analyse security alerts and operational problems to identify potential causes, security gaps and associated risks.
• Evaluate available options and recommend appropriate corrective actions or solutions.
• Identify recurring alerts, false positives and operational inefficiencies that may affect monitoring effectiveness. Follow established tuning processes and recommend improvements or new processes where necessary.
• Document investigation findings, risk assessments and recommendations accurately.
• Escalate significant, complex or high-risk security issues to senior Security Operations personnel.
• Support the maintenance and improvement of Security Operations procedures, runbooks and playbooks.
• Work with relevant technical teams to gather information and support the resolution of identified security issues.

2. Automation

• Identify opportunities to reduce repetitive manual activities and alert fatigue through automation.
• Develop and maintain basic automation workflows and playbooks using SOAR platforms or other approved automation tools.
• Explore and apply approved AI technologies to support alert enrichment, classification, summarisation and analysis.
• Analyse recurring alerts and recommend automation or detection improvements to reduce unnecessary alerts.
• Test and validate automation workflows to ensure accuracy, reliability and effectiveness before deployment.
• Work with senior team members to review and implement automation solutions in accordance with established change management and security requirements.
• Monitor the effectiveness of implemented automation and recommend further improvements.
• Maintain appropriate documentation for automation workflows, logic and operational procedures

3. Incident Response Support

• Provide support to senior Security Operations personnel during cybersecurity incidents as required.
• Gather and analyse relevant logs, alerts and supporting information as directed.
• Support assigned investigation and information-gathering activities under the guidance of incident responders.
• Document observations, findings and activities performed during incident investigations.

Skills for Success:

• Diploma or Degree in Cybersecurity, Information Security, Computer Science, Information Technology, Computer Engineering or a related discipline.
• Fresh graduates and candidates with relevant cybersecurity experience are welcome to apply.
• Basic understanding of cybersecurity principles, common cyber threats and Security Operations concepts.
• Basic knowledge of networking, operating systems and security event analysis.
• Familiarity with cybersecurity monitoring technologies such as SIEM, EDR, IDS/IPS or related tools.
• Basic scripting or programming knowledge, such as Python, PowerShell or similar languages.
• Basic understanding of APIs, workflow automation or system integration concepts.
• Interest in SOAR technologies and AI-assisted cybersecurity operations.
• Awareness of relevant technology domains such as network security, endpoint security, infrastructure, applications, cloud or identity and access management.
• Good analytical and problem-solving skills with the ability to identify issues, gaps and potential risks.
• Ability to evaluate available options and recommend practical solutions.
• Logical and structured approach to troubleshooting and problem-solving.
• Willingness to explore automation and AI technologies to improve operational efficiency.
• Good attention to detail and ability to document technical findings clearly.
• Ability to follow established procedures while exercising appropriate professional judgement.
• Good communication and teamwork skills.
• Self-motivated with a strong willingness to learn and develop cybersecurity capabilities.

Good To Have:

• One or more of the following professional certificates:

  • CompTIA Security Analyst

  • GCIA

  • GCIH

Are you ready to say hello to BIG Possibilities?

Join Singtel to shape what's next and accelerate your career through meaningful work, continuous learning, and real impact.

Take the leap with Singtel to shape what’s next and accelerate your growth.