Cybersecurity Incident Response Specialist - SOC / CSIRT

Sopra Steria; Singapore; On-site; SGD 90,000 - 130,000; Full time

Benefits offered by this job

Hybrid working mode

Work-from-Abroad benefits

18 days annual leave

Health & insurance

Job summary

Sopra Steria is seeking a Cybersecurity Incident Response Specialist to support automotive clients in the Asia Pacific region from Singapore. The role emphasizes proximity to client sites, rapid response, and expert guidance in CSIRT operations, escalation handling, and remediation tracking.

You will coordinate with central CDOC teams, translate business needs into technical requirements, and help improve detection and response processes while maintaining strong liaison with on-site teams and

Qualifications

• Strong knowledge of cybersecurity operations, SOC/CDOC environments and incident response processes.
• Experience coordinating across technical and non-technical stakeholders.
• Ability to translate business needs into technical cybersecurity requirements.

Responsibilities

• Act as local CSIRT relay and interface with central CDOC teams.
• Coordinate incident escalations and remediation actions near client sites.
• Lead complex operational response actions from containment to eradication.
• Validate technical remediation and secure recovery of information systems.
• Support crisis management during major attacks with CSIRT guidance.

Skills

Cybersecurity ops

SOC/CDOC envir.

Incident response

Stakeholder comms

Coordination

Autonomy

Tools

Sentinel

Logic Apps

Job description

Cybersecurity Incident Response Specialist - SOC / CSIRT

• Full-time

Sopra Steria is a listed European technology leader specializing in Consulting, Digital Services, and Software. With over 51,000 employees worldwide across Europe, North America and Asia, the Group supports organizations in driving their digital transformation and delivering sustainable business value.

In Asia Pacific, Singapore serves as the regional headquarter for Sopra Steria's Infrastructure, Cloud and Cybersecurity services.

We are looking for a Cybersecurity Incident Response Specialist - SOC / CSIRT to assist one of our clients in the automotive industry.

Role Overview:

You will act as a Level 3 (N3) cybersecurity operational coordinatorand CSIRT support relay, positioned close to client's sites and serving as a key interface with central Cyber Detection & Response (CDOC)teams.

This role ensures strong proximity, rapid response capability, and expert-level supportduring complex or critical cybersecurity incidents. You will enhance mutual understanding between business, functional, and technical stakeholders, while ensuring efficient escalation handling, mitigation tracking, and incident coordination.

Key Responsibilities:

Operational Coordination & Proximity

• Serve as the local cybersecurity management contactfor client's sites.
• Maintain close proximity to on-site teams to understand operational need, critical assets, operational priorities and constraints.
• Act as a trusted relay between the stakeholders and central CDOC teams.
• Facilitate and coordinate incident escalationsto appropriate teams.
• Act as anescalation pointfor complex cases requiring expert arbitration or cross‑team coordination.
• Ensure follow-up of mitigations, remediation plans, and corrective actions.

Advanced Incident Response Support

• Intervene in complex or critical cybersecurity incidentsthat fall outside standard response procedures and require advanced incident response expertise.
• Support and, when required, lead complex operational response actions, from containment to threat eradication.
• Oversee and validate technical remediation and system restoration, ensuring secure and controlled recovery of the information system.
• Guarantee alignment between technical risks, business impacts, and client prioritiesthroughout incident handling.

Crisis Management

• Provide expert support to crisis managementand assume a coordination role, under CSIRT guidance, during critical incidents, including major attacks or high-impact security events.

Requirements Translation & Solution Alignment

• Translate functional and business requirementsinto clear technical requirementsfor cybersecurity teams.
• Contribute to the definition and alignment of global cybersecurity solutions, ensuring local constraints and feedback are considered.
• Support continuous improvement of detection, response, and operational processes.

Communication & Information Relay

• From sites to Detection & Response teams (context, impact, priorities).
• From central teams to local stakeholders (status, actions, recommendations).
• Promote knowledge sharing and operational best practices.
• Actively contribute to improving daily operations, responsiveness, and service quality.
• Leverage experience and expertise to deliver daily added valueto operational teams.
• Strong knowledge of cybersecurity operations, SOC/CDOC environments, and incident response processes.
• Proven ability to coordinate across technical and non-technical stakeholders.
• Experience in incident management, escalation handling, and mitigation tracking.
• Ability to translate business needs into technical cybersecurity requirements.
• Strong communication, facilitation, and coordination skills.
• Autonomous, proactive, and solution-oriented mindset.
• Experience or Knowledge of products Sentinel and Logic Apps.
• Acts as a Level 3 operational relaybetween local teams and global CDOC functions.
• Key contributor to operational efficiency, risk reduction, and continuous improvement

• Strong knowledge of cybersecurity operations, SOC/CDOC environments, and incident response processes.
• Proven ability to coordinate across technical and non-technical stakeholders.
• Experience in incident management, escalation handling, and mitigation tracking.
• Ability to translate business needs into technical cybersecurity requirements.
• Strong communication, facilitation, and coordination skills.
• Autonomous, proactive, and solution-oriented mindset.
• Experience or Knowledge of products Sentinel and Logic Apps.
• Acts as a Level 3 operational relay between local teams and global CDOC functions.
• Key contributor to operational efficiency, risk reduction, and continuous improvement

Benefits

• Work-life balance: Hybrid working mode and Work-from-Abroad benefits, 18 days of Annual leave
• Health & insurance: Comprehensive coverage including General Practitioner, hospitalization, dental, and optical
• Performance incentives: Annual bonus based on individual performance
• Learning & development: Training programs, certification opportunities, and training incentives to support career growth
• Team culture: Regular team-building activities and social events

By clicking the link above or any third-party link within this posting, you are leaving this site and going to a third-party website where the third-party website's terms and privacy policy apply