Lead DFIR & Threat Detection Architect

FPT Asia Pacific Pte Ltd; Singapore; On-site; SGD 180,000 - 260,000; Full time

Job summary

Singlife seeks a senior cyber security leader to take command of major incidents, own the full DFIR lifecycle, and drive defence strategy aligned to MAS TRM, NIST CSF v2.0 and ISO/IEC 27001:2022. You will govern SIEM, SOAR, EDR and DLP, lead threat hunting, and mentor a high-performing team in a regulated financial services environment.

You will also shape telemetry, build automation, and oversee third-party partners while contributing to audits and board reporting.

Qualifications

• 8+ years in cyber security with hands-on DFIR and threat-hunting experience.
• Proven track record leading major incidents end-to-end.
• Strong knowledge of MAS TRM, NIST CSF v2.0, ISO/IEC 27001:2022, MITRE ATT&CK.
• Experience across cloud, endpoint, network and identity telemetry.

Responsibilities

• Take command of major cyber incidents and own end-to-end DFIR lifecycle.
• Set and drive cyber defence strategy aligned to industry standards.
• Govern and optimise SIEM, SOAR, EDR and DLP platforms for coverage.
• Lead detection engineering and threat hunting mapped to MITRE ATT&CK.
• Shape telemetry and logging strategy with prioritized log onboarding.
• Build security automation and orchestration for faster response.
• Adopt AI-enabled capabilities with appropriate guardrails.
• Develop and test incident response playbooks and runbooks.
• Manage external partners with SLA oversight and performance reviews.
• Define and track detection metrics (MTTD/MTTR) for continuous improvement.
• Mentor analysts and engineers to build a high-performing team.
• Support audits, regulatory engagements and board reporting.

Skills

DFIR

Detection Engineering

Threat Hunting

Security Automation

AI-enabled Security Operations

Incident response leadership

Cloud telemetry (AWS/Azure)

Automation & playbooks

MITRE ATT&CK

Regulated financial services knowledge

Education

Bachelor's degree in Computer Science, Information Security or related field

Tools

SIEM

SOAR

EDR

DLP

Job description

Singlife seeks a senior cyber security leader to take command of major incidents, own the full DFIR lifecycle, and drive defence strategy aligned to MAS TRM, NIST CSF v2.0 and ISO/IEC 27001:2022. You will govern SIEM, SOAR, EDR and DLP, lead threat hunting, and mentor a high-performing team in a regulated financial services environment.

You will also shape telemetry, build automation, and oversee third-party partners while contributing to audits and board reporting.