Cybersecurity Operation Lead

THALES SOLUTIONS ASIA PTE. LTD.; Singapore; On-site; SGD 90,000 - 130,000; Full time

Job summary

A leading technology firm in Singapore is seeking an experienced Cybersecurity Operations Lead to oversee mission-critical security operations. The role includes threat monitoring, incident response, and vulnerability management, leading a team of cybersecurity engineers, and ensuring compliance with IM8 governance standards. Ideal candidates need a Bachelor’s degree in a related field and at least 5 years in cybersecurity operations, with strong knowledge of security tools and practices.

Qualifications

• Minimum 5 years of proven experience in cybersecurity or information security roles.
• Strong competency in operating system security, network security, and Kubernetes security.
• Hands-on experience with security tools is a must.
• CISSP, CISM, or equivalent preferred.

Responsibilities

• Oversee day-to-day security monitoring using SIEM tools.
• Lead incident response and root cause analysis for cybersecurity events.
• Manage remediation of vulnerabilities across environments.
• Drive compliance with IM8 cybersecurity policies and procedures.

Skills

Operating system security (RHEL, Windows Server)

Network security

Kubernetes security

Incident response

Excellent communication skills

Proactive collaboration

Education

Bachelor’s degree in Information Security, Computer Science, Engineering, or related discipline

Tools

SIEM (LogRhythm)

Vulnerability Scanner (Nessus)

IAM/PAM (BeyondTrust/CyberArk)

Firewalls (Check Point, Palo Alto)

TLS/PKI

Job description

Position Summary

We are seeking an experienced Cybersecurity Operations Lead to oversee mission‑critical security operations in a 24 × 7 environment. This role is responsible for threat monitoring, incident response, vulnerability management, and ensuring compliance with IM8 governance standards. You will lead a team of cybersecurity engineers, manage security infrastructure, and drive continuous improvement in operational security practices.

Responsibilities

Threat Monitoring & Incident Response

• Oversee day-to-day security monitoring using SIEM and endpoint protection tools.
• Lead incident response, containment, eradication, and root cause analysis for cybersecurity events.
• Ensure clear incident classification, escalation workflows, and communication protocols.

Vulnerability & Patch Management

• Lead vulnerability assessments and penetration testing programs.
• Manage remediation of vulnerabilities across servers, network devices, middleware, and containers.
• Ensure timely patching cycles across all environments.

Security Infrastructure & System Hardening

• Implement, configure, and maintain security technologies (firewalls, IDS/IPS, HSM, PAM).
• Oversee OS, application, and network hardening (RHEL, Windows Server, Kubernetes).
• Review and approve security architecture designs for new components and projects.

Privileged Access Management

• Govern privileged access across Active Directory domains.
• Ensure segregation of duties, emergency access procedures, and periodic access reviews.

Governance & Compliance

• Enforce compliance with IM8 cybersecurity policies and standards.
• Drive audit readiness, maintain risk registers, and track remediation progress.

Team Leadership

• Liaise with cross‑function teams.
• Ensure clear documentation, SOPs, and knowledge transfer for all security activities.
• Drive continuous training and certification for team members.

Requirements

• Bachelor’s degree in Information Security, Computer Science, Engineering, or related discipline.
• Minimum 5 years of proven experience in cybersecurity or information security roles supporting mission‑critical operations, preferably in the public sector.
• Strong competency in operating system security (RHEL, Windows Server), network security, and Kubernetes security.
• Hands‑on experience with two or more tools such as SIEM (LogRhythm), Vulnerability Scanner (Nessus), IAM/PAM (BeyondTrust/CyberArk), HSM, TLS/PKI, Firewalls (Check Point, Palo Alto), IDS/IPS is a must.
• CISSP, CISM, CEH or equivalent preferred.
• Security principles (CIA, defense in depth, least privilege).
• Networking and OS fundamentals.
• Identity & Access Management, cryptography basics.
• Application security fundamentals (OWASP Top 10, secure coding principles).
• Incident response and IM8 compliance knowledge.
• Strong composure under pressure and ability to lead during incidents.
• Excellent communication skills (written and spoken).
• High integrity, attention to detail, and accountability.
• Proactive, collaborative, and able to manage cross‑functional coordination.