About the role
AI summarisedAVP/SA, Cyber Threat Hunter (Identity & Access Monitoring), Information Security Services role at DBS Bank in Singapore - East.
BankingOnsite
Key Responsibilities
- , enriching SIEM and data lake analytics, and driving advanced defense strategies that enhance the bank's overall security posture Key Responsibilities Conduct proactive threat hunting across network, endpoint, and identity data sources to detect credential misuse, privilege abuse, and lateral movement.
- Analyze telemetry from identity systems such as Privileged Access Management (PAM), Active Directory, Azure AD, ADFS, AWS, and GCP to identify abnormal authentication or authorization behavior.
- Develop and refine detection logic for identity threats within SIEM, UEBA, or XDR platforms using MITRE ATT&CK and ATT&CK for Identity frameworks.
- Collaborate with application teams and log source platform owners to review custom application logs, assess compatibility for security monitoring, and facilitate their onboarding into SIEM platforms and data lakes.
Requirements
- -fidelity data onboarding for developing new use cases and threat detection content.
- Participate in post-incident and red team/blue team exercises to validate monitoring controls and improve defensive coverage.
- Continuously enhance log visibility, hunting processes, and automation pipelines in alignment with DBS's Cyber Defence and Data Governance Frameworks Required Skills and Experience 5–10 years of experience in Security Operations, Threat Hunting, or Incident Response, preferably within financial or large enterprise environments.