Lead, Cybersecurity Incident Response

SOURCEO PTE. LTD.; Singapore; On-site; SGD 90,000 - 130,000; Full time

Job summary

A leading company in cybersecurity is looking for a Lead Cybersecurity Incident Response professional in Singapore. You will play a pivotal role in managing and leading responses to cybersecurity threats while working collaboratively with various teams. Ideal candidates should have extensive experience in incident response, along with strong technical skills and the ability to communicate effectively under pressure. Join us to safeguard digital assets and enhance our security posture.

Qualifications

• Minimum of 5 years of experience in lead Cybersecurity incident response.
• Excellent communication and report-writing skills.
• Strong understanding of cybersecurity frameworks.

Responsibilities

• Lead response to cybersecurity incidents including malware and data breaches.
• Manage and oversee forensic analysis and threat hunting.
• Collaborate under high-pressure scenarios.

Skills

Incident response

Threat hunting

Forensic analysis

Network security

Malware analysis

Log analysis

Cloud security

Container security

Scripting

Automation

Tools

Elastic

Splunk

AWS Guard Duty

Azure Sentinel

Google Chronicle

Job description

Job Description

Job Title

Lead, Cybersecurity Incident Response

Job Description & Requirements

Key Responsibilities

Lead the response to cybersecurity incidents, including malware infections, data breaches, and insider threats.

Minimum of 5 years of experience in lead Cybersecurity incident response

• Strong expertise in incident response, threat hunting, and forensic analysis.
• Experience with SIEM tools (e.g., Elastic, Splunk).
• Proficiency in network security, malware analysis, and log analysis.
• Familiarity with cloud security (AWS, Azure, GCP) and container security.
• Experience with cloud security tools and AI-powered security analytics (AWS Guard Duty, Azure Sentinel, Google Chronicle).
• Familiarity with AI/ML-driven anomaly detection and behavioral analysis techniques.
• Knowledge of security solutions (EDR, XDR, NDR, WAF, Proxy, Firewall, Email Security).
• Scripting and automation skills (Python, PowerShell, Bash).
• Deep understanding of the MITRE ATT&CK framework, cyber kill chain, and machine learning models for cybersecurity applications.
• Excellent communication and report-writing skills and the ability to work under pressure scenarios.