Enterprise Cybersecurity Incident Response Lead

Singtel; Singapore; On-site; Confidential; Full time

Job summary

Singtel is seeking a seasoned cybersecurity professional to lead incident response and threat hunting within a complex enterprise environment in Singapore. You will coordinate cross-functional teams across SOC, network, cloud, and infrastructure to detect and remediate threats, while maturing detection capabilities and incident playbooks.

The role emphasizes hands-on work with SIEM/EDR/NDR, vulnerability management and risk-based remediation, with opportunities to influence security strategy and

Qualifications

• Bachelor's degree or diploma in Cybersecurity, IT, CS, Engineering.
• Minimum 7 years of experience in cybersecurity operations, incident response, threat hunting or SOC roles.
• Hands-on with SIEM, EDR, NDR, vulnerability management, and threat intelligence.
• Strong knowledge of network security, Windows/Linux, AD, and cloud security fundamentals.
• Excellent analytical, documentation, and stakeholder management skills.

Responsibilities

• Act as the Enterprise Cyber Security focal point during cyber incidents.
• Support incident response activities including triage, containment, evidence gathering, remediation tracking and post-incident review.
• Conduct proactive threat hunting using telemetry from SIEM, EDR, NDR, vulnerability management, and asset discovery tools.
• Identify suspicious behaviours, attack patterns, lateral movement indicators, privilege misuse and signs of compromise.
• Develop and enhance threat hunting hypotheses, detection use cases, playbooks, response procedures and escalation workflows.
• Improve alert quality, detection coverage, investigation context and incident response readiness with SOC and central security teams.
• Support vulnerability management and risk-based remediation by correlating vulnerabilities with asset criticality and threat intel.
• Prepare management reports, investigation summaries, threat hunting findings, risk updates and security posture metrics.

Skills

Incident Response

Threat Hunting

SOC Operations

Detection Engineering

Infrastructure Security

Cloud Security

Network Security

Log Analysis

Communication

Stakeholder Management

Education

Bachelor's degree or Diploma in Cybersecurity/IT/CS/Engineering

Tools

SIEM

EDR

NDR

Vulnerability Management

Threat Intelligence Platforms

Asset Discovery Tools

Firewalls

Endpoint Security

Cloud Security Tools

Networking Security Controls

Job description

Singtel is seeking a seasoned cybersecurity professional to lead incident response and threat hunting within a complex enterprise environment in Singapore. You will coordinate cross-functional teams across SOC, network, cloud, and infrastructure to detect and remediate threats, while maturing detection capabilities and incident playbooks.

The role emphasizes hands-on work with SIEM/EDR/NDR, vulnerability management and risk-based remediation, with opportunities to influence security strategy and