Information Security Analyst - Singapore

Job Description

Location: Singapore

Join Fortinet, a cybersecurity pioneer with over two decades of excellence, as we continue to shape the future of cybersecurity and redefine the intersection of networking and security. At Fortinet, our mission is to safeguard people, devices, and data everywhere. We are currently seeking a dynamic Information Security Analyst to contribute to the success of our rapidly growing business.

This is a highly technical role, monitoring security events, identifying threats, assessing risks, and working with customers globally to improve their security posture. The role sits at the intersection of alert triage, detection engineering, and AI-augmented operations — the analyst will work within a Fortinet-native stack (FortiSIEM, FortiAnalyzer, FortiSOAR) and actively collaborate with AI agents to drive more accurate and efficient security operations.

FortiCloud SOC-as-a-Service team operates based on a follow‑the‑sun approach. Working hours for this position include 5 days/40 hours per week, consisting of 1 weekend and 4 weekdays (e.g. Sunday – Thursday or Tuesday – Saturday), 8am – 4pm.

Key Responsibilities

Monitor SOC alerts to detect potential threats

Use threat intelligence feeds, triage alerts and filter out false‑positives

Create custom reports, dashboards, and execute log searches to support investigations and customers’ requirements

Work with customers and the Forensic analysis team to contain and eradicate incidents if needed

Follow Incident Response playbooks, processes and procedures and help to improve them

Create/Update use‑case detections to detect new threats from raw logs

Create/Update playbooks to automate repetitive triage steps

Operationalise detection use cases from FortiSIEM and FortiAnalyzer into FortiSOAR, contributing to the team’s detection engineering pipeline

Interact with AI agents during alert triage to review and validate AI‑generated alert summaries, enrichment, and contextual analysis

Provide structured feedback to AI agents to continuously refine alert summarisation accuracy and triage decision logic based on real‑world alert patterns

Qualifications

Strong understanding of SOC operations, the Incident Response lifecycle, Cyber Kill Chain, threat vectors, threat intelligence, and cybersecurity frameworks (e.g., MITRE ATT&CK, NIST)

Hands‑on experience with security log analysis (AV, IPS, Anti‑Spam), Linux and Windows administration, PostgreSQL, regular expressions, and security visualisation and reporting tools

Practical experience with network security technologies including Firewalls, SIEM, EDR, and Sandbox; hands‑on experience with Fortinet products (FortiSIEM, FortiAnalyzer, FortiSOAR) is a strong advantage

Aptitude for detection engineering — able to translate threat scenarios into structured use‑case logic and operationalise detections across FortiSIEM, FortiAnalyzer, and FortiSOAR

Comfortable working alongside AI agents; able to critically evaluate AI‑generated alert summaries, enrichment, and triage recommendations, and provide structured feedback to improve them over time

Team player, self‑directed, and disciplined communicator; cybersecurity certifications (GCIA, GCIH, GMON, GSOC, CEH, Security+) are a bonus

Why Join Us

At Fortinet, we embrace diversity and inclusivity. We encourage applications from diverse backgrounds and identities. Explore our welcoming work environment designed for a rewarding career journey with an attractive Total Rewards package to support you with your overall health and financial well‑being. Join us in bringing solutions that make a meaningful and lasting impact to our 660,000+ customers around the globe.

We will only notify shortlisted candidates.

Fortinet will not entertain any unsolicited resumes; please refrain from sending them to any Fortinet employees or Fortinet email aliases. Should any Agency submit any resumes to Fortinet, these resumes, if considered, will be assumed to have been given by the Agency free of any related fees/charges.

#J-18808-Ljbffr