Cybersecurity Engineer – Incident Response

Jobtailor; Singapore; Hybrid; SGD 90,000 - 140,000; Full time

Job summary

Jobtailor is seeking a senior Incident Response and Digital Forensics professional in Singapore to lead IR activities across all phases of incidents. The role involves triage, containment, root-cause analysis, and comprehensive log analysis across cloud, network, and endpoints.

You will perform forensic acquisitions, report findings, and drive post-incident improvements. A hybrid work arrangement in Singapore is supported, with strong communication to stakeholders and collaboration with

Qualifications

• Bachelor's degree in Computer Science/Information Security or equivalent.
• Professional certifications (GCFA, CISSP, etc.) preferred.
• 5+ years of incident response/digital forensics/malware analysis or related discipline preferred.
• Understanding of Windows/Linux OS, networking, LAN and servers.
• Proficiency with forensic tools AXIOM, FTK, Autopsy.

Responsibilities

• Lead incident response activities through all phases of an incident.
• Conduct triage and investigation to determine scope and severity.
• Develop and execute containment strategies.
• Perform investigations and root cause analysis to identify attack vectors and impact.
• Analyze security event logs across endpoint/EDR, network, application, and cloud logs.
• Conduct digital forensic acquisition and analysis across devices and environments.
• Maintain stakeholder communication throughout the incident lifecycle.
• Prepare post-incident reports with preventive recommendations.
• Provide input for automating Security Operations, including SOAR playbooks.
• Develop and test incident response playbooks and processes.
• Maintain awareness of cybersecurity landscape and threat actor TTPs.
• Collaborate with GovTech, government agencies, and partners to mitigate cyber risks and bolster security.

Skills

Incident Response

Digital Forensics

Malware Analysis

Security Event Log Analysis

Root Cause Analysis

Containment Strategies

Static and Dynamic Malware Analysis

Network Log Analysis

Application Log Analysis

Cloud Security Practices

Communication Skills

Multitasking

Prioritization

Integrity

GCFA

GREM

GNFA

GCTI

CISSP

Education

Bachelor's Degree in Computer Science/Information Security or equivalent

Tools

AXIOM

FTK

Autopsy

EDR

Cloud Technologies

Container Technologies

Job description

• Lead incident response activities through all phases of an incident
• Conduct triage and investigation of potential cybersecurity incidents to determine incident scope and severity
• Develop and execute containment strategies
• Perform investigations and root cause analysis to identify attack vectors, tactics, and impact
• Conduct comprehensive security event log analysis to validate security detections, investigate alerts, and identify attacks across endpoint/EDR, network, application, and cloud logs and audit trails
• Conduct digital forensic acquisition and analysis of artifacts from endpoint systems, servers, network devices and logs, cloud environments, mobile devices, and storage media
• Maintain clear stakeholder communication throughout the incident lifecycle
• Prepare comprehensive post-incident reports with preventive recommendations
• Provide expert input for automating Security Operations, including implementing SOAR playbooks
• Develop and test incident response playbooks and processes
• Maintain situational awareness of the cybersecurity landscape and emerging threat actor TTPs
• Collaborate with GovTech, government agencies, and commercial partners to mitigate cyber risks and bolster security postures

Requirements

• Bachelors Degree in Computer Science/Information Security or equivalent
• Professional certifications, including GCFA, GREM, GNFA, GCTI, CISSP or other relevant certifications will be preferred
• Preferably 5 years or more of experience as a full-time incident responder/digital forensic/malware analysis or related discipline
• Understanding of operating systems and platform (e.g. Windows, Linux) and knowledge of computer networking, LAN, and server
• Proficient in Forensic Tools such as AXIOM, FTK or Autopsy
• Ability to perform basic static and dynamic malware analysis and to analyse network and application logs
• Good working knowledge of Cloud and Container technologies are a plus
• Familiarity with good security practices
• Good communication and interpersonal skills, with the ability to multitask and priortise
• Meticulous and demonstrate a high degree of integrity, initiative, energy and endurance
• Ability to work in a hybrid workplace arrangement

Core Competencies

Demonstrates expertise in incident response, digital forensics, and cybersecurity analysis, with a strong focus on developing and executing containment strategies and incident response playbooks. Proficient in utilizing forensic tools and maintaining effective communication with stakeholders throughout the incident lifecycle.

Highest-signal resume keywords

• Incident Response Leadership
• Digital Forensics Expertise
• Forensic Tool Proficiency
• Cybersecurity Incident Investigation
• Professional Certifications (GCFA, CISSP)

Hard Skills

• Incident Response
• Digital Forensics
• Malware Analysis
• Security Event Log Analysis
• Root Cause Analysis
• Containment Strategies
• Static and Dynamic Malware Analysis
• Network Log Analysis
• Application Log Analysis
• Cloud Security Practices

Soft Skills

• Communication Skills
• Interpersonal Skills
• Multitasking
• Prioritization
• Integrity

Certifications & Qualifications

• GCFA
• GREM
• GNFA
• GCTI
• CISSP

Industry Keywords

• Cybersecurity
• Incident Triage
• Threat Actor TTPs
• Security Operations Automation
• Stakeholder Communication

Tools & Technologies

• AXIOM
• FTK
• Autopsy
• Endpoint Detection and Response (EDR)
• Cloud Technologies
• Container Technologies