PUB Cybersecurity Traineeship: SOC Analyst [GRIT@Gov]

The Security Operations Center (SOC) Analyst role at PUB serves as a frontline cybersecurity defender, protecting Singapore's water infrastructure from evolving digital threats. This position involves continuously monitoring network systems and security tools to detect suspicious activities, responding swiftly to cyber incidents, and coordinating with internal teams and government agencies to contain potential damage. The analyst stays current with threat intelligence and ensures all security procedures comply with government standards like IM8 and CCOP. Beyond day-to-day threat detection and response, the role encompasses building PUB's cyber resilience through leading cyber security exercises, taking charge of cyber awareness programmes, and assisting cyber policy implementation. The position requires technical skills in operating systems and network protocols, combined with effective communication abilities to engage stakeholders ranging from PUB senior management to external vendors and agencies like CSA and GovTech. As part of the GRIT@Gov Traineeship initiative, this position provides comprehensive exposure to cybersecurity operations, from threat detection and incident response to compliance management and cyber resilience planning. Trainees will develop technical security skills, threat intelligence analysis capabilities, and stakeholder engagement expertise while contributing to innovative solutions that strengthen PUB's digital defence posture and operational security.

1. Security Monitoring • Keep a close watch on network, system, applications and security tools to detect any unusual or suspicious activities that could indicate a cyber-attack or vulnerability or threat • Identify and categorize security incidents like malware, data breaches and insider threats, helping the team respond quickly to potential threats • Assess alerts generated by security tools and decide how severe they are and their priority level addressing the most critical threats first • Record keeping of security alerts triage actions for future reference and analysis 2. Cybersecurity Incident Response • Take swift actions to analyse, contain and mitigate the threat while coordinating with other teams 3. Threat Intelligence • Stay up-to-date on the latest cybersecurity threats, vulnerabilities and attack techniques and continuously incorporate new threat intelligence into monitoring and response efforts 4. Cybersecurity Readiness and Resilience • Maintain up-to-date policies and procedures related to security monitoring and incident response • Organize, participate and lead different cyber readiness initiatives such as table-top exercises, ground deployment exercises and cyber range exercises • Share good cyber practice with internal stakeholders through workshops and site visits and ensure internal stakeholders maintain resiliency requirements 5. Compliance • Ensure compliance with standards and regulations such as IM8 and CCOP

• Bachelor Degree in Engineering, Information Systems, Computer Engineering, Computer Science, Cybersecurity or equivalent • Good Knowledge of regulatory requirements desired but not mandatory • Industry hands-on certifications (e.g. HTB Certified Defensive Security Analyst, Offsec Defense Analyst) desired but not mandatory • Ability to understand and communicate technical cyber security issues • Attention to detail and accuracy • Drive to thrive in a fast-paced environment • Adaptability to quickly learn and apply new technologies and techniques • Strong analytical and problem-solving skills • Strong interpersonal skills and teamwork