Cyber Incident Response Lead - Security Operations

JJ CONSULTING SERVICES; Singapore; On-site; SGD 120,000 - 160,000; Full time

Job summary

JJ CONSULTING SERVICES in Singapore is seeking a Lead IT Specialist (Cybersecurity Incident Response) to drive the incident response lifecycle across triage, investigations, containment and recovery.

You will lead security operations, perform log analysis and digital forensics, coordinate with stakeholders, and develop playbooks and post-incident reports. Strong experience with Windows/Linux, cloud, and tools like Splunk/ELK, AXIOM, FTK or Autopsy is required.

Qualifications

• Bachelor's Degree in Computer Science or Information Security.
• GCFA, GREM, GNFA, GCTI, CISSP or similar preferred.
• 5+ years as incident responder or related field preferred.

Responsibilities

• Lead incident response activities through all phases of an incident.
• Triage and investigate potential cyber security incidents to determine scope and severity.
• Develop and execute containment strategies.
• Perform root cause analysis to identify attack vectors and impact.
• Analyze security event logs from multiple sources to validate detections.
• Conduct digital forensics acquisition and analysis from endpoints, servers, networks, and cloud.
• Maintain stakeholder communication and prepare post-incident reports with preventive recommendations.
• Contribute to automating security operations and incident response playbooks.

Skills

Incident response

Digital forensics

Log analysis

Security operations

Communication

Education

Bachelor's Degree in Computer Science/Information Security

Tools

Splunk

ELK Stack

Google SecOps

AXIOM

FTK

Autopsy

Job description

JJ CONSULTING SERVICES in Singapore is seeking a Lead IT Specialist (Cybersecurity Incident Response) to drive the incident response lifecycle across triage, investigations, containment and recovery.

You will lead security operations, perform log analysis and digital forensics, coordinate with stakeholders, and develop playbooks and post-incident reports. Strong experience with Windows/Linux, cloud, and tools like Splunk/ELK, AXIOM, FTK or Autopsy is required.