Cyber Defence Officer

SCB-JULIUS BAER (SINGAPORE) PTE. LTD.; Singapore; On-site; SGD 120,000 - 180,000; Full time

Job summary

SCB-JULIUS BAER (SINGAPORE) PTE. LTD. is seeking a hands-on Cyber Defence professional to support the global Cyber Fusion Center in security operations, threat intelligence, and detection engineering.

You will work alongside IT and other functions to highlight and mitigate cyber risks for the Bank. Key responsibilities include 24/7 monitoring, L1/L2 incident response, threat hunting, and developing detections while supporting audits and governance across Asia.

Qualifications

• Bachelor's degree in information security or related field.
• Experience in Level 1/2 security operations and incident response.
• Strong knowledge of SIEM/SOAR platforms and security dashboards.

Responsibilities

• Execute 24/7 security monitoring and incident handling in the Cyber Fusion Center.
• Lead L1/L2 incident response from detection to containment and recovery.
• Perform threat intelligence activities and proactive hunting for IOCs/TPPs.
• Support cyber investigations using forensic and analysis tools.
• Collaborate with global and regional stakeholders to manage cyber risk and controls.

Skills

Interpersonal & communication

Self-driven

Analytical & quantitative modelling

Resilience under pressure

Ownership & responsibility

Time management & prioritisation

Education

Bachelor's Degree in Information Security / CS / Engineering

Tools

SIEM

SOAR

GUI development

Dashboarding

Python scripting

Job description

At Julius Baer, we celebrate and value the individual qualities you bring, enabling you to be impactful, to be entrepreneurial, to be empowered, and to create value beyond wealth. Let’s shape the future of wealth management together.

The CRO division develops and oversees the global framework for risk identification, control, reporting, and management within the risk tolerance for the various business activities for Julius Baer.

The incumbent is responsible for supporting the global Cyber Fusion Center in executing security operations, threat intelligence, and detection engineering. This means providing the needed support in developing, driving, and managing Cyber Defence activities in the Bank.

As part of the Risk Management function in the Bank, the incumbent will need to work closely with IT, Corporate Services or other relevant functions together with the Head of Cyber Fusion Center Asia to ensure that cyber risks are highlighted, mitigated, and remediated appropriately.

YOUR CHALLENGE

Security operations (L1/L2)

• Execute continuous security monitoring, triage, and in-depth analysis of security events within the Cyber Fusion Center, ensuring 24/7 operational coverage through structured on-call and on-duty rotas
• Perform Level 1 (L1) and Level 2 (L2) incident response activities, from initial detection through containment, eradication, and recovery, ensuring timely remediation and risk mitigation
• Monitor, review, and follow up on security incidents to ensure timely resolution, maintaining comprehensive documentation and case management throughout the incident lifecycle

Cyber threat intelligence (CTI)

• Identify cyber threats, such as critical vulnerabilities, applicable to the Bank and assess their potential impact
• Conduct proactive threat hunting to search for specific Indicators of Compromise (IOCs) or Tactics, Techniques, and Procedures (TTPs)
• Gather and analyse intelligence from internal networks and external sources to anticipate emerging threats and proactively address them
• Support the assessment of detective and protective security controls by simulating controlled attacks against the Bank's infrastructure

Other cyber defence responsibilities

• Support cyber investigations as required, including the operation of relevant forensics and analysis tools
• Support the engineering stream in automated attack simulation testing
• Support the engineering stream in developing and maintaining detections where applicable
• Support project delivery where applicable
• Support internal and external audits by coordinating reviews, facilitating evidence collection, and tracking remediation activities
• Collaborate with global, regional, and local stakeholders to effectively manage cyber risk matters, and communicate risk insights, control requirements, and key issues to senior management and other stakeholders
• Ensure appropriate ethical and compliant behaviour within the area of responsibility by clear demonstration of appropriate values and behaviours including but not limited to standards on honesty and integrity, due care and diligence, fair dealing (treating customers fairly), management of conflicts of interest, competence and continuous development, adequate risk management, and compliance with applicable laws and regulations

YOUR PROFILE

Personal and social

• Strong interpersonal, communication, and presentation skills
• Self-driven and able to work independently to drive initiatives and tasks
• Strong analytical and quantitative modelling skills
• Resilient and able to perform effectively under pressure in a fast-paced operational environment, particularly during active incident response
• Willingness to take responsibility
• Strong organisational and prioritisation skills, with the ability to deliver results within tight deadlines

Professional and technical

• Bachelor's Degree in Information Security, Computer Science, Computer Engineering, or a related discipline.
• Proven experience in Level 1 and Level 2 security operations, threat analysis, and incident response within the banking or financial services industry, preferably in Wealth Management
• Strong knowledge of cyber security operations with hands‑on experience in SIEM and SOAR platforms, GUI development, and dashboarding
• Strong programming and scripting skills (e.g., Python) for automation and customisation of security workflow
• Experience with Artificial Intelligence, in particular generative AI, is a plus
• Professional certification in Information Security (e.g., Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM)) and knowledge of security frameworks such as MITRE Att&ck is advantageous but not required