Lead Digital Forensics & Incident Response Specialist

JJ CONSULTING SERVICES; Singapore; On-site; SGD 120,000 - 180,000; Full time

Job summary

JJ Consulting Services in Singapore seeks a Lead Cyber Security Specialist (Digital Forensics) to oversee cybersecurity operations across incident response lifecycle. You will triage events, conduct investigations, and advise on containment and recovery strategies, using log analysis and forensics to drive effective responses.

The role requires strong communication to guide decision makers and a focus on secure delivery of applications and infrastructure.

Qualifications

• Bachelor's degree in Computer Science/Info Security or equivalent.
• GCFA/GREM/GNFA/GCTI/CISSP or similar preferred.
• 5+ years in incident response/digital forensics or related field.
• Strong log analysis and cross-source correlation.
• Familiarity with Windows/Linux, networking basics, and cloud/containers.

Responsibilities

• Lead incident response across all phases of incident lifecycle.
• Triage and investigate potential cybersecurity incidents to determine scope and severity.
• Develop and execute containment strategies.
• Perform investigations and root cause analysis to identify attack vectors and impact.
• Conduct security log analysis across endpoint, network, application, and cloud logs.
• Conduct digital forensic acquisition/analysis from endpoints, servers, networks, cloud, and mobile devices.
• Maintain stakeholder communication and prepare post-incident reports with preventive recommendations.
• Contribute to automating SOC with SOAR playbooks and incident playbooks.

Skills

Log analysis

Incident response

Digital forensics

Malware analysis

Communication

Education

Bachelor's degree

Tools

Splunk

ELK Stack

Google SecOps

AXIOM

FTK

Autopsy

Job description

JJ Consulting Services in Singapore seeks a Lead Cyber Security Specialist (Digital Forensics) to oversee cybersecurity operations across incident response lifecycle. You will triage events, conduct investigations, and advise on containment and recovery strategies, using log analysis and forensics to drive effective responses.

The role requires strong communication to guide decision makers and a focus on secure delivery of applications and infrastructure.