DY Head Section (Cloud Monitoring)

The Digital and Intelligence Service (DIS); Singapore; On-site; SGD 150,000 - 230,000; Full time

Job summary

The Digital and Intelligence Service (DIS) invites a DY Head Section (Cloud Monitoring) to oversee threat detection, localisation, and incident management within cloud environments. You will supervise training, SOP adherence, and knowledge management across the SOC, coordinating with SAF system managers and vendors for integration and patch management.

The successful candidate will lead a team, establish KPIs, review SOPs against evolving threats, and promote knowledge sharing while driving

Qualifications

• Bachelor's degree in Cybersecurity, Computer Engineering or Information Systems.
• 5–8 years in cybersecurity roles with at least 2 years in senior or supervisory SOC positions.
• Hold GSOC/GCIH/CISSP/CISM or equivalent certifications.
• Proficient in SIEM, IDS/IPS, EDR, and endpoint security tooling.
• Familiarity with cloud monitoring tools such as SolarWinds, Azure Monitor, or AWS Monitoring.

Responsibilities

• Assist the Section Head in building the team’s competency and expansion towards the direction of a SOC.
• Interact with external and internal stakeholders for discussion and coordination of system integration, project trials and system enhancements.
• Providing guidance and support during cyber incidents and escalations.
• Coordinate and assist with incident management efforts, including containment, remediation and recovery phases.
• Establish KPIs for SOC’s exercises and subsequently evaluate individual and team competencies and performance during the exercises.
• Review SOPs to ensure alignment with evolving cyber threats and SAF policies.
• Promote a culture of knowledge sharing within the SOC team to enhance collective expertise.
• Formalise the documentation of past incident management cases and lessons learned for knowledge retention.
• Ensure SOC’s tools’ meet baseline requirements and are optimised.
• Stay informed about emerging cyber threats and evolving tool capabilities to collaborate with other stakeholders.
• Work with stakeholders to ensure the performance and resource utilisation of the SOC tools.

Skills

SOC leadership

Threat detection

Incident response

Vendor coordination

Knowledge management

Education

Cybersecurity/Computer Engineering/IS degree

Tools

SIEM

IDS/IPS

EDR

Cloud monitoring tools

Job description

DY Head Section (Cloud Monitoring) - Cyber Defence Group

As the DY Head Section (Cloud Monitoring), you oversee the team’s daily operations involving threat detection and localisation, and incident management in cloud environment. You are also required to supervise the team’s training and development activities, and ensure team adherence to established cyber monitoring and detection SOPs and knowledge management. You will also coordinate with vendors and SAF System managers for SOC-related matters such as systems’ integration, project system trials and security patch management.

What You Will Do

• Assist the Section Head in building the team’s competency and expansion towards the direction of a Security Operation Centre (SOC)


• Interact with external and internal stakeholders for discussion and coordination of system integration, project trials and system enhancements


• Providing guidance and support during cyber incidents and escalations.


• Coordinate and assist with incident management efforts, including containment, remediation and recovery phases


• Establish KPIs for SOC’s exercises and subsequently evaluate individual and team competencies and performance during the exercises.


• Review SOPs to ensure alignment with evolving cyber threats and SAF policies.


• Promote a culture of knowledge sharing within the SOC team to enhance collective expertise.


• Formalise the documentation of past incident management cases and lessons learned for knowledge retention.


• Ensure SOC’s tools’ meet baseline requirements and are optimised


• Stay informed about emerging cyber threats and evolving tool capabilities to collaborate with other stakeholders.


• Work with stakeholders to ensure the performance and resource utilisation of the SOC tools

What You Will Bring

• Education in Cybersecurity, Computer Engineering, Information Systems or an equivalent discipline.


• At least 5 to 8 years of working experience in cybersecurity roles, including a minimum of 2 years in a senior or supervisory roles within a SOC or Cyber Emergency Response Team.


• Possession of relevant technical certification such as: GIAC Security Operations Certified (GSOC), GIAC Certified Incident Handler (GCIH), Certified Information Systems Security Professional (CISSP) and/or Certified Information System Manager (CISM))


• Proficiency in tools such as: Security Information and Event Management, Intrusion Detection System, Intrusion Prevention System, and Endpoint Detection and Response.


• Familiarity with Cloud Monitoring related tools such as SolarWinds, Azure Monitor, AWS Monitoring

Join us in shaping the future of defence technology.