Deputy Head, Security Operations Centre (SOC)

The Digital and Intelligence Service (DIS); Singapore; On-site; SGD 180,000 - 260,000; Full time

Job summary

The Digital and Intelligence Service (DIS) invites applications for Deputy Head, Security Operations Centre (SOC) within the Cyber Defence Group, Defence Cyber Command (DCCOM) in Singapore. Lead and scale the SOC’s capability, oversee incident response, and mentor a high-calibre team in a high-threat environment.

You will collaborate with stakeholders to optimise SOC infrastructure, drive 24/7 monitoring, and ensure governance and security requirements are met, crafting a disciplined, effective

Qualifications

• Bachelor-level or higher in cybersecurity, computer engineering, information systems, or equivalent.
• Minimum 6 years in cybersecurity roles with demonstrated leadership.
• Experience guiding SOC operations and capability development.

Responsibilities

• Lead SOC capability development and expansion with the Section Head.
• Provide oversight during cyber incidents and steer incident management across containment, eradication, and recovery.
• Oversee 24/7 monitoring duties and maintain operation vigilance and command presence.
• Advise on the design and integration of security tools and platforms across host and network environments.
• Engage internal and external stakeholders to align SOC requirements with enterprise priorities.

Skills

Leadership

Incident management

Stakeholder engagement

Communication skills

Analytical thinking

Education

Cybersecurity or related field

Equivalent discipline

Tools

SIEM

IDS/IPS

EDR

Job description

Deputy Head, Security Operations Centre (SOC) - Cyber Defence Group, Defence Cyber Command (DCCOM)

As Deputy Head, you will lead and guide SOC in monitoring, investigation, and response activities, while driving operational discipline. You will also review and advise on the design and optimisation of SOC infrastructure while working with various stakeholders, ensuring alignment with organisational security and governance requirements. You will build a high-performing SOC team equipped to operate effectively in a dynamic threat environment.

What You Will Do

1. Leadership & SOC Capability Development

• Partner the Section Head in guiding the development and expansion of the SOC’s capabilities and operating model.
• Build, mentor, and develop a high-calibre SOC team through performance management, and leadership development.
• Lead SOC-related Capability Development Projects and detection engineering effort.

2. Operational Oversight & Incident Leadership

• Provide oversight and direction during cyber incidents and escalations, ensuring timely, coordinated, and effective response actions.
• Lead and support incident management across containment, eradication, remediation, and recovery phases.
• Support Section Head to oversee 24/7 monitoring duties, maintaining operational vigilance and command presence.
• Review and advise on the design, placement, and coverage of intrusion detection capabilities and endpoint hardening agents across host and network environments.
• Ensure SOC tools meet baseline operational and security requirements, and drive continuous optimisation of detection efficacy and resource utilisation.
• Oversee the integration of complex security systems and ensure interoperability across platforms.

4. Stakeholder Engagement & Governance

• Engage internal and external stakeholders to align SOC requirements with enterprise priorities.
• Oversee coordination for system integrations, project trials, and security enhancements to ensure SOC requirements are embedded from design through deployment.
• Provide informed advice on operational risks, capability gaps, and mitigation measures to leadership and system owners.

What You Will Bring

• Education in Cybersecurity, Computer Engineering, Information Systems or an equivalent discipline
• At least 6 years of working experience in cybersecurity roles
• Relevant technical certification, e.g. GIAC Security Operations Certified (GSOC), GIAC Certified Incident Handler (GCIH), Certified Information Systems Security Professional (CISSP) and/or Certified Information System Manager (CISM))
• Proficiency in tools, e.g. Security Information and Event Management, Intrusion Detection System, Intrusion Prevention System, and Endpoint Detection and Response
• Familiarity in evaluating cybersecurity tools
• Good team managerial skills, with strong problem solving conceptual and analytical skills
• Strong writing, interpersonal and communication skills, and being meticulous in work

Join us in shaping the future of defence technology.