Cybersecurity Lead – SOC & Incident Response - Perm - S$Nego

MORGAN MCKINLEY PTE. LTD.; Singapore; On-site; SGD 100,000 - 150,000; Full time

Job summary

A leading recruitment firm is seeking a Cybersecurity Lead for its Singapore operations. This role involves managing a small team of SOC Analysts and overseeing cybersecurity incident response. Candidates need 5-10 years of experience in cybersecurity operations and strong skills in security monitoring tools. The position promises a hands-on leadership experience while collaborating across IT and Risk teams to enhance organizational resilience against cyber threats.

Qualifications

• 5–10 years of experience in cybersecurity operations, SOC, or incident response roles.
• Proven experience leading or mentoring a small SOC or security operations team.
• Strong hands-on experience with SIEM, EDR/XDR, and security monitoring tools.

Responsibilities

• Lead and manage security monitoring and response to cybersecurity incidents.
• Perform root cause analysis and forensic investigations.
• Train and develop a small team of SOC Analysts.

Skills

Cybersecurity operations

Incident response

Security monitoring tools

Communication skills

Threat hunting

Education

Certifications such as GCIH, GCED, GCIA, CISSP

Tools

Microsoft Sentinel

CrowdStrike

Palo Alto

Job description

Role Overview

The Cybersecurity Lead – SOC & Incident Response is responsible for leading day-to-day security operations and a small team of SOC Analysts, overseeing monitoring, incident response, and continuous improvement of detection and response capabilities. This role is hands-on and leadership-focused, working closely with IT, Cloud, and Risk teams to protect the organisation from cyber threats while strengthening operational resilience.

Key Responsibilities

• Lead and manage security monitoring, triage, and response to cybersecurity incidents across endpoint, network, cloud, and identity environments.
• Act as escalation point for high-severity incidents, coordinating containment, eradication, recovery, and post-incident reviews.
• Perform or oversee root cause analysis, forensic investigations, and impact assessments.
• Maintain and continuously improve incident response playbooks, runbooks, and escalation procedures.
• Lead, mentor, and develop a small team of SOC Analysts, including task prioritisation, quality assurance, and performance coaching.
• Establish shift coverage, on-call support, and incident escalation models.
• Drive skills development through training, simulations, and tabletop exercises.
• Support regulatory, audit, and compliance requirements related to security incidents.
• Provide clear incident reporting and metrics to management.
• Improve detection and response by tuning SIEM/EDR alerts, identifying coverage gaps, and recommending security control enhancements.
• Partner with Threat Intelligence, Vulnerability Management, and Infrastructure teams to reduce attack surface and improve resilience.

Required Skills & Experience

• 5–10 years of experience in cybersecurity operations, SOC, or incident response roles.
• Proven experience leading or mentoring a small SOC or security operations team.
• Strong hands-on experience with SIEM, EDR/XDR, SOAR, and security monitoring tools.
• Solid understanding of modern attack techniques, malware, phishing, ransomware, and insider threats.
• Experience responding to incidents across Windows, Linux, cloud (Azure/AWS/GCP), and identity platforms.
• Strong communication skills with the ability to brief management during incidents.
• Experience in financial services, regulated environments, or large enterprises.
• Hands-on experience with Microsoft Sentinel, Defender, CrowdStrike, Palo Alto, or similar tools.
• Exposure to threat hunting or digital forensics.
• Certifications such as GCIH, GCED, GCIA, CISSP, or equivalent.

If you are interested, please apply through the application system or email to [e-mail]. Shortlisted candidates will be notified.

By sending us your personal data and CV, you are deemed to consent to Morgan McKinley Pte Ltd and its affiliates to collect, use and disclose your personal data for the purposes set out in the Privacy Policy available at https://www.morganmckinley.com/sg/privacy-policy. You acknowledge that you have read, understood, and agree with the Privacy Policy.

Morgan McKinley Pte Ltd
Koh Boon Sien
EA Licence No: 11C5502
EA Registration No. R1110345