Information Technology - Cyber Security Lead Engineer

SINGAPORE AIRLINES LIMITED; Singapore; On-site; SGD 70,000 - 90,000; Full time

Job summary

A leading airline company in Singapore seeks an experienced Information Security Specialist to enhance its cyber security posture. You will lead incident responses, mentor junior staff, and develop response playbooks. The ideal candidate should possess a degree in IT and relevant security certifications, with at least 6 years of experience in managing cyber security threats and incidents. This role offers an opportunity for career growth within the company.

Qualifications

• At least 6 years of relevant information security experience.
• Strong knowledge in various IT platforms including Windows and UNIX.
• Experience in resolving high-priority issues effectively.

Responsibilities

• Respond to and mitigate cyber security incidents.
• Lead incident response and collaboration with multiple teams.
• Develop cyber incident response playbooks.

Skills

Hands-on experience with SIEM

Hands-on experience with EDR

Strong in-depth knowledge in Networking

Knowledge of cyber security threats

Strong oral and written communication skills

Ability to mentor junior staff

Education

Degree in IT or related fields

Professional security certifications (CISSP, CISA, CEH)

Tools

SIEM

EDR

XDR

SOAR tools

Job description

Job Description

You will be a member of the Group Information Security Team responsible for responding to threats and incidents to the corporate networks, systems (on-prem and cloud) and digital assets.

Key Responsibilities:

• Act as the subject matter expert (SME) for the security systems owned by the security team.

• Recommend and drive cyber security solutions and initiatives to improve the organization's cyber security posture.

• Lead and drive major incidents towards mitigation and resolution in collaboration with multiple internal counterparts.

• Ensure excellent communication to stakeholders, providing timely and accurate updates during incidents.

• Respond to, assess, and investigate security events in collaboration with vendors.

• Coordinate with internal stakeholders such as applications, network, and infrastructure teams for investigations.

• Perform in-depth analysis and assess vulnerabilities, IOCs, cyber security intelligence, and open-source information to validate security risks and impacts, recommending appropriate countermeasures.

• Develop and maintain cyber incident response and handling playbooks for various threat scenarios.

• Recommend and implement tools to enhance detection, response, and recovery functions and overall security posture.

• Develop methodologies to identify threat adversary tactics, techniques, and procedures.

• Stay abreast of new and emerging cyber threats, attack vectors, etc., and assess their impact.

• Provide strategic guidance and oversight to vendors, ensuring adherence to agreed-upon SLAs and KPIs.

• Guide and mentor junior staff within the security operations team, providing support as needed.

• Perform any relevant ad-hoc duties as required.

Requirements:

• Degree in IT or related fields, with at least 6 years of relevant information security working experience.

• Professional security certifications (CISSP, CISA, CEH, GCIH, etc.) preferred.

• Hands-on experience with SIEM, EDR, XDR, UEBA and SOAR tools preferred.

• Strong in-depth working knowledge in Networking, Cloud, Active Directory, Windows and UNIX platforms, and Mitre framework.

• Knowledge of cyber security threats, vulnerabilities, hacking, and exploit methods, etc.

• Strong oral, written, presentation, and interpersonal skills.

• Possess a positive attitude with drive, initiative, enthusiasm, and a keen sense of urgency in resolving high-priority issues.

• Able to work independently and in a team-oriented, collaborative environment.

• Experience in guiding and mentoring junior staff within a security operations team.

• Candidates will be considered for a senior role commensurate with their experience.