Assistant Vice President, Global Threat Hunting

MUFG; Singapore; On-site; SGD 90,000 - 120,000; Full time

Job summary

A global banking institution in Singapore is seeking an AVP of Global Threat Hunting Centre. This role involves implementing threat hunting programs and collaborating with global cybersecurity teams to enhance security. Ideal candidates have at least 5 years of experience in threat hunting and incident response, along with strong communication skills. The position focuses on proactive detection of cyber threats and requires expertise in security frameworks and coding. The role offers opportunities for continuous learning and development in a challenging environment.

Qualifications

• Minimum 5 years experience in threat hunting, digital forensics, and/or incident response.
• Experience in threat hunting frameworks such as PEAK and TAHITI.
• Possess security certifications such as SANS Advanced Incident Response, Threat Hunting and Digital Forensics.

Responsibilities

• Implement threat hunting programs and detect security threats across the Bank.
• Collaborate with global cybersecurity teams and maintain cyber defence posture.
• Provide program-level reporting on hunting results and security posture.
• Ensure effective response to global incidents and participate in initiatives related to threat detection.

Skills

Threat hunting

Digital forensics

Incident response

Coding (Python)

Data analytics

Communication skills

Interpersonal skills

Education

Bachelor's degree in Computer Science, Information Security or related field

Tools

Security certifications (SANS Advanced Incident Response)

Job description

Job Responsibilities

The AVP of Global Threat Hunting Centre is responsible for performing threat hunting and detection engineering to proactively hunt for and detect cyber threats across the Banking group globally. This role involves implementing a threat hunting program and methodology, establishing detection engineering to achieve the program objectives, and collaborating with global cybersecurity teams to build a robust and resilient cyber defence posture.

This role is required to work closely with Global SOC, Threat Intelligence and Incident Response operations to ensure effective response to global incidents, collaborate with technology Infrastructure stakeholders on the engineering front, and participate in global initiatives related to threat detection and log collection.

This role will be based in Singapore and report to the Director and VP of Global Threat Hunting Centre for APAC.

Threat Hunting and Detection Engineering

• Be part of the Global Threat Hunting Centre operations, ensuring threat hunting programs that are intel-led, continuous and effective to enable timely detection of security threats across the Bank.
• Implement detection-as-code as the core tenet of the Threat hunting program. Build up detection engineering capabilities with automated pipelines to accelerate and expand coverage of threat detection across the various IT assets and environments, both on-premise and on cloud.
• Continuously refine and elevate the maturity of the Threat Hunting and Detection Engineering practices, such as introducing AI / ML to further enhance the hunting and detection capabilities.
• Provide program-level reporting on the hunting results and security posture to both Head Office and APAC management. Collate and report a set of global metrics and QA to measure program effectiveness and maturity.
• Adopt continuous education to be equipped with knowledge of the latest techniques, tactics and procedures of cyber threats, and to elevate skills and knowledge.
• Operate as part of a Global team across multiple time zones, jurisdictions and business environments.

This role is crucial for maintaining the security and integrity of the Bank’s information systems, and the ideal candidate should be a proactive individual, achievement-oriented, and strong team player.

Job Requirements

• Minimum 5 years experience in threat hunting, digital forensics and/or incident response, with experience in Threat Hunting frameworks such as PEAK and TAHITI.
• Experience in coding such as with Python, data analytics, open source tooling and/or CICD pipelines.
• Possess security certifications such as SANS Advanced Incident Response, Threat Hunting and Digital Forensics.
• Excellent communication and interpersonal skills to effectively collaborate with stakeholders at all levels.
• Bachelor's degree in Computer Science, Information Security, or related field.

We regret to inform that only shortlisted applicants will be notified.