IT Security Specialist (SOC)

The mission of Housing & Development Board (HDB) is to provide affordable, quality housing and a great living environment where communities thrive. To achieve its mission, HDB aims to be data-driven to the core and adopt evidence-based decision making in developing better housing policies service, improving service delivery and optimising operations

As a member of our Security Operations Centre (SOC) Team, you will be at the forefront of cybersecurity defence, playing a critical role in safeguarding HDB's ICT infrastructure through comprehensive security monitoring, incident response, and operational enhancement activities. Security Monitoring and Threat Analysis Monitor and assess the security posture of HDB's ICT infrastructure across on-premises and cloud environments, providing regular reports on security status, trends, and actionable recommendations to mitigate potential threats. Investigate security alerts and incidents generated by monitoring tools, SIEM platforms, and threat intelligence sources. Operate and maintain critical security technologies including SIEM, EDR, and SOAR platforms to ensure comprehensive threat detection and response capabilities. Incident Response Lead end-to-end cybersecurity incident investigations in accordance with Government security policies and industry best practices. Coordinate rapid response efforts during security incidents, providing timely updates and comprehensive reporting to management and relevant authorities. Guide stakeholders through incident investigation processes, develop remediation strategies and recovery plans for affected systems, and maintain continuously improved incident management procedures for both on-premises and cloud environments. Process Innovation and Automation Design and refine SOC processes and procedures to enhance operational efficiency and reduce response times. Implement automation and artificial intelligence solutions to optimise SOC operations, improve threat detection capabilities, and streamline incident response processes. Professional Development and Cross-Functional Collaboration Participate in diverse SOC activities including threat hunting, cyber intelligence analysis, and SOC engineering projects to broaden your expertise and accelerate career development within HDB's growing cybersecurity function.

Have demonstrable experience and in-depth knowledge in cybersecurity operations and incident response. Possess strong experience with various cybersecurity technologies including IDS/IPS, firewalls, SIEM platforms, email security, web security, cloud security, and endpoint security solutions. Have at least 2 years of experience as a Tier 2 analyst in a SOC environment or equivalent cybersecurity operations role. Demonstrate strong analytical and problem-solving skills with meticulous attention to detail. Can work effectively under pressure, meet critical deadlines, and make sound decisions during security incidents. Strong written and verbal communication skills, with ability to explain technical concepts to diverse stakeholders across the organisation. Have experience in threat hunting or red teaming activities. Hold professional certifications such as GIAC Certified Incident Handler (GCIH), EC-Council Certified Ethical Hacker (CEH), Certified SOC Analyst (CSA), or other relevant cybersecurity qualifications. Good to Have: Exceptional attention to detail and commitment to quality in all security operations. Proven ability to work autonomously while maintaining high standards of reliability, trustworthiness, and integrity. Natural sense of ownership and accountability, taking initiative to drive continuous improvement in security processes. Collaborative mindset with ability to work effectively across cross-functional teams. Knowledge of cloud security frameworks and experience with modern security orchestration tools. Successful candidates will be offered a 1+1 year contract in the first instance. Find out more about a career with HDB at www.hdb.gov.sg/cs/infoweb/about-us/careers All applicants will be notified on whether they are shortlisted for the position within 4 weeks of the closing date of this job posting.