Lead Cyber Incident Responder - Detection, SIEM & IR

WE-PLUS PTE. LTD.; Singapore; Vor Ort; SGD 120.000 - 180.000; Vollzeit

Zusammenfassung

WE-PLUS PTE. LTD. seeks an experienced Cybersecurity expert in Detection Engineering & Security Investigation to strengthen APAC detection capabilities and join a global use-case development team.

You will contribute to SIEM/SOAR enhancement and act as a reference point for incident response activities within a 24/7 regional IT Production SOC. The role requires hands-on threat hunting, MITRE ATT&CK framework familiarity, and collaboration with global stakeholders to improve security monitoring

Qualifikationen

• Minimum 7+ years in security with 4+ years in use-case design and development.
• Experience designing security use cases and threat hunting.
• Strong knowledge of SIEM/incident management processes.
• Proficiency in scripting languages such as Python/PowerShell/Bash is a plus.

Aufgaben

• Lead security use-case definition, design and implementation in production SOC.
• Oversee 24/7 detection and incident response in APAC region.
• Collaborate with global and regional stakeholders to improve detection framework.
• Respond to security incidents, assess severity and coordinate remediation.
• Continuously improve SOC playbooks and tooling.

Kenntnisse

Security use case design

Threat hunting

Incident response

SIEM/SOAR

Linux administration

Java

Threat modeling

Data analysis

Ausbildung

Bachelor's degree in Computer Science / Information Security

CISSP / OSCP / similar certification

Tools

Elastic Stack (ELK)

SIEM tools

Threat intel platforms

Jobbeschreibung

WE-PLUS PTE. LTD. seeks an experienced Cybersecurity expert in Detection Engineering & Security Investigation to strengthen APAC detection capabilities and join a global use-case development team.

You will contribute to SIEM/SOAR enhancement and act as a reference point for incident response activities within a 24/7 regional IT Production SOC. The role requires hands-on threat hunting, MITRE ATT&CK framework familiarity, and collaboration with global stakeholders to improve security monitoring