Lead Cyber Incident Responder & Threat Hunter

Xcellink Pte Ltd; Singapore; On-site; SGD 90,000 - 130,000; Full time

Job summary

Xcellink Pte Ltd is seeking an experienced security incident responder in Singapore to lead end-to-end investigations, including malware infections and data breaches. You will coordinate with SOC teams, develop playbooks, and drive proactive threat hunting.

The role requires strong SIEM experience, cloud security know-how, and hands-on forensic skills, with an emphasis on clear reporting under pressure. A forward-thinking, security-first mindset is essential.

Qualifications

• Strong expertise in incident response, threat hunting, and forensic analysis.
• Experience with SIEM tools (Elastic, Splunk).
• Proficiency in network security, malware analysis, and log analysis.
• Familiarity with cloud security (AWS, Azure, GCP) and container security.
• Experience with cloud security tools and AI-powered security analytics (GuardDuty, Sentinel, Chronicle).
• Familiarity with AI/ML-driven anomaly detection and behavioural analysis techniques.
• Knowledge of security solutions (EDR, XDR, NDR, WAF, Proxy, Firewall, Email Security).
• Scripting and automation skills (Python, PowerShell, Bash).
• Deep understanding of MITRE ATT&CK framework, kill chain, and ML models for cybersecurity.
• Excellent communication and report-writing skills under pressure.

Responsibilities

• Lead the response to cybersecurity incidents (malware, data breaches, insider threats).
• Perform real-time and retrospective analysis to identify threats.
• Coordinate with MSSP SOC teams for monitoring and alerting.
• Develop and document incident response plans and playbooks.
• Conduct proactive threat hunting to identify unknown threats.
• Perform digital forensic analysis to determine root causes.
• Use forensic tools to collect and analyze logs, memory dumps, and disk images.
• Work with SIEM tools to detect anomalous behaviour and improve alerts.
• Analyze logs from firewalls, IDS/IPS, endpoint protection, and cloud security tools.
• Recommend and implement security controls to reduce exposure.
• Provide technical leadership to junior incident responders and security analysts.

Skills

Incident response

Threat hunting

Forensic analysis

Communication

Report writing

Scripting & automation

Machine learning awareness

Tools

Elastic/Splunk SIEM

AWS GuardDuty

Azure Sentinel

Google Chronicle

EDR/XDR

WAF/Proxy/Firewall

Job description

Xcellink Pte Ltd is seeking an experienced security incident responder in Singapore to lead end-to-end investigations, including malware infections and data breaches. You will coordinate with SOC teams, develop playbooks, and drive proactive threat hunting.

The role requires strong SIEM experience, cloud security know-how, and hands-on forensic skills, with an emphasis on clear reporting under pressure. A forward-thinking, security-first mindset is essential.