Lead Cyber Security Specialist (Digital Forensics)

Forensic Focus Limited; Singapore; On-site; SGD 120,000 - 180,000; Full time

Job summary

Forensic Focus Limited is seeking a senior cybersecurity professional to lead end-to-end incident response across endpoint, cloud, and mobile environments. The role focuses on digital forensic acquisition, log analysis, and developing response playbooks to improve security operations.

The candidate will communicate findings to senior stakeholders, drive automation through SOAR, and own complex engagements in high-pressure situations.

Qualifications

• Strong digital forensics and log analysis across multiple data sources.
• Experience with incident response across endpoint, cloud, and mobile environments.
• Ability to translate complex findings for non-technical decision makers.

Responsibilities

• Lead end-to-end incident response operations across triage, investigation, containment, and recovery.
• Develop response playbooks and drive SOAR automation.
• Communicate findings clearly to stakeholders throughout the lifecycle.

Skills

Digital forensics

Log analysis

Incident response

EDR telemetry

Cloud audit trails

Critical thinking

Stakeholder communication

Tools

SOAR automation

EDR

Job description

The Role

This position leads end-to-end incident response operations, covering triage, investigation, containment, and recovery across endpoint, network, cloud, and mobile environments. The specialist conducts digital forensic acquisition, performs log analysis across multiple data sources, develops response playbooks, contributes to SOAR automation, and communicates findings clearly to stakeholders throughout the incident lifecycle.

Skills & Experience

Candidates require strong digital forensics and log analysis capabilities spanning EDR telemetry, network traffic, application logs, and cloud audit trails. Experience with incident response across endpoint, cloud, and mobile environments is essential. Critical thinking, root cause analysis expertise, and the ability to translate technical findings for non-technical decision makers are equally important.

Who It Suits

This role suits an experienced cybersecurity professional ready to take ownership of complex incident response engagements in a lead capacity. Someone who thrives in high-pressure environments, communicates confidently with senior stakeholders, and is motivated to improve security operations through process development and automation will find this position particularly rewarding.