Lead Cyber Security Specialist (Digital Forensics)

JJ CONSULTING SERVICES; Singapore; On-site; SGD 120,000 - 180,000; Full time

Job summary

JJ Consulting Services in Singapore seeks a Lead Cyber Security Specialist (Digital Forensics) to oversee cybersecurity operations across incident response lifecycle. You will triage events, conduct investigations, and advise on containment and recovery strategies, using log analysis and forensics to drive effective responses.

The role requires strong communication to guide decision makers and a focus on secure delivery of applications and infrastructure.

Qualifications

• Bachelor's degree in Computer Science/Info Security or equivalent.
• GCFA/GREM/GNFA/GCTI/CISSP or similar preferred.
• 5+ years in incident response/digital forensics or related field.
• Strong log analysis and cross-source correlation.
• Familiarity with Windows/Linux, networking basics, and cloud/containers.

Responsibilities

• Lead incident response across all phases of incident lifecycle.
• Triage and investigate potential cybersecurity incidents to determine scope and severity.
• Develop and execute containment strategies.
• Perform investigations and root cause analysis to identify attack vectors and impact.
• Conduct security log analysis across endpoint, network, application, and cloud logs.
• Conduct digital forensic acquisition/analysis from endpoints, servers, networks, cloud, and mobile devices.
• Maintain stakeholder communication and prepare post-incident reports with preventive recommendations.
• Contribute to automating SOC with SOAR playbooks and incident playbooks.

Skills

Log analysis

Incident response

Digital forensics

Malware analysis

Communication

Education

Bachelor's degree

Tools

Splunk

ELK Stack

Google SecOps

AXIOM

FTK

Autopsy

Job description

Our Client is an established company in Singapore, who is seeking to recruit a Lead Cyber Security Specialist (Digital Forensics).

The successful candidate will ensure the delivery of cybersecurity operations services across all stages of the incident response lifecycle. This encompasses triaging potential security events, conducting in-depth investigations and advising on containment, eradication and recovery strategies. Candidate must possess strong log analysis and digital forensics skills to drive effective responses to cybersecurity incidents that ensure secure delivery of applications and infrastructure services. Critical thinking and great communication skills are required to articulate technical concepts and guide decision makers towards optimal courses of action.

Key Responsibilities

• Lead incident response activities through all phases of an incident:
• Conduct triage and investigation of potential cybersecurity incidents to determine incident scope and severity
• Develop and execute containment strategies
• Perform investigations and root cause analysis to identify attack vectors, tactics, and impact
• Conduct comprehensive security event log analysis to validate security detections, investigate alerts, and identify attacks across multiple data sources including:
• Endpoint system logs or Endpoint detection and response (EDR) telemetry
• Network traffic logs
• Application logs
• Cloud service logs and audit trails
• Conduct digital forensic acquisition and analysis of artifacts from various sources including:
• Endpoint systems and servers
• Network devices and logs
• Cloud environments
• Mobile devices and storage media
• Maintain clear stakeholder communication throughout incident lifecycle and prepare comprehensive post-incident reports with preventive recommendations
• Provide expert input for automating Security Operations (E.g Implement SOAR playbooks)
• Develop and test incident response playbooks and processes
• Maintain situational awareness of cyber security landscape and emerging threat actor TTPs

Requirements

• Bachelor’s Degree in Computer Science/Information Security or equivalent
• Professional certifications, including GCFA, GREM, GNFA, GCTI, CISSP or other relevant certifications will be preferred
• Preferably 5 years or more of experience as a full-time incident responder/digital forensic/malware analysis or related discipline
• Understanding of operating systems and platform (e.g. Windows, Linux) and knowledge of computer networking, LAN, and server
• Strong ability with log analysis techniques, familiarity with platforms (e.g., Splunk, ELK Stack, Google SecOps) and analytical skills to correlate events across multiple log sources to identify attack patterns
• Proficient in Forensic Tools such as AXIOM, FTK or Autopsy
• Ability to perform basic static and dynamic malware analysis and to analyse network and application logs
• Good working knowledge of Cloud and Container technologies are a plus
• Familiarity with good security practices
• Good communication and interpersonal skills, with the ability to multitask and prioritise

JJ Consulting Services

EA Licence No.: 12C6207