Cyber Defence Officer

Julius Baer; Singapore; Sur place; SGD 90 000 - 150 000; Plein temps

Résumé du poste

Julius Baer in Singapore seeks a Cyber Defence professional to join the Risk Management function. You will support the global Cyber Fusion Center, executing security operations, threat intelligence, and detection engineering to protect the bank’s infrastructure.

Key duties include monitoring security events 24/7, performing L1/L2 incident response, and collaborating with IT and other teams to identify and remediate cyber risks. Relevant SIEM/SOAR experience and security certifications are valued.

Qualifications

• Bachelor’s degree in information security, CS, or related field.
• Experience in Level 1/2 security operations and incident response in financial services.
• Hands-on SIEM, SOAR, GUI development, and dashboards.
• Programming/scripting skills (Python) for automation.
• Familiarity with AI, especially generative AI, is a plus.
• Certifications such as CISSP/CISM and knowledge of MITRE ATT&CK are advantageous.

Responsabilités

• Execute 24/7 security monitoring and incident triage in the Cyber Fusion Center.
• Conduct L1/L2 incident response from detection to containment and recovery.
• Monitor incidents and maintain case documentation through lifecycle.
• Identify threats and proactively address them with threat hunting.
• Support audits and collaborate with stakeholders to manage cyber risk.

Connaissances

Interpersonal skills

Communication skills

Presentation skills

Analytical skills

Ability to work under pressure

Formation

Bachelor’s degree in information security, CS, or related field

Outils

SIEM

SOAR

GUI development

Dashboarding

Description du poste

At Julius Baer, we celebrate and value the individual qualities you bring, enabling you to be impactful, to be entrepreneurial, to be empowered, and to create value beyond wealth. Let’s shape the future of wealth management together.

The CRO division develops and oversees the global framework for risk identification, control, reporting, and management within the risk tolerance for the various business activities for Julius Baer.

The incumbent is responsible for supporting the global Cyber Fusion Center in executing security operations, threat intelligence, and detection engineering. This means providing the needed support in developing, driving, and managing Cyber Defence activities in the Bank.

As part of the Risk Management function in the Bank, the incumbent will need to work closely with IT, Corporate Services or other relevant functions together with the Head of Cyber Fusion Center Asia to ensure that cyber risks are highlighted, mitigated, and remediated appropriately.

YOUR CHALLENGE

Security operations (L1/L2)

• Execute continuous security monitoring, triage, and in-depth analysis of security events within the Cyber Fusion Center, ensuring 24/7 operational coverage through structured on-call and on-duty rotas
• Perform Level 1 (L1) and Level 2 (L2) incident response activities, from initial detection through containment, eradication, and recovery, ensuring timely remediation and risk mitigation
• Monitor, review, and follow up on security incidents to ensure timely resolution, maintaining comprehensive documentation and case management throughout the incident lifecycle

Cyber threat intelligence (CTI)

• Identify cyber threats, such as critical vulnerabilities, applicable to the Bank and assess their potential impact
• Conduct proactive threat hunting to search for specific Indicators of Compromise (IOCs) or Tactics, Techniques, and Procedures (TTPs)
• Gather and analyse intelligence from internal networks and external sources to anticipate emerging threats and proactively address them
• Support the assessment of detective and protective security controls by simulating controlled attacks against the Bank’s infrastructure

Other cyber defence responsibilities

• Support cyber investigations as required, including the operation of relevant forensics and analysis tools
• Support the engineering stream in automated attack simulation testing
• Support the engineering stream in developing and maintaining detections where applicable
• Support project delivery where applicable
• Support internal and external audits by coordinating reviews, facilitating evidence collection, and tracking remediation activities
• Collaborate with global, regional, and local stakeholders to effectively manage cyber risk matters, and communicate risk insights, control requirements, and key issues to senior management and other stakeholders
• Ensure appropriate ethical and compliant behaviour within the area of responsibility by clear demonstration of appropriate values and behaviours including but not limited to standards on honesty and integrity, due care and diligence, fair dealing (treating customers fairly), management of conflicts of interest, competence and continuous development, adequate risk management, and compliance with applicable laws and regulations

YOUR PROFILE

Personal and social

• Strong interpersonal, communication, and presentation skills
• Self-driven and able to work independently to drive initiatives and tasks
• Strong analytical and quantitative modelling skills
• Resilient and able to perform effectively under pressure in a fast-paced operational environment, particularly during active incident response
• Willingness to take responsibility
• Strong organisational and prioritisation skills, with the ability to deliver results within tight deadlines

Professional and technical

• Bachelor’s Degree in Information Security, Computer Science, Computer Engineering, or a related discipline.
• Proven experience in Level 1 and Level 2 security operations, threat analysis, and incident response within the banking or financial services industry, preferably in Wealth Management
• Strong knowledge of cyber security operations with hands‑on experience in SIEM and SOAR platforms, GUI development, and dashboarding
• Strong programming and scripting skills (e.g., Python) for automation and customisation of security workflow
• Experience with Artificial Intelligence, in particular generative AI, is a plus
• Professional certification in Information Security (e.g., Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM)) and knowledge of security frameworks such as MITRE Att&ck is advantageous but not required