Lead IT Specialist (Cybersecurity Incident Response)

JJ Consulting Services; Singapore; Sur place; SGD 90 000 - 140 000; Plein temps

Résumé du poste

Our client in Singapore seeks a Lead IT Specialist (Cybersecurity Incident Response) to drive incident response across the lifecycle, from triage to containment and recovery. The role requires strong log analysis, forensics skills, and the ability to guide actions with clear communication.

Responsibilities include leading IR activities, conducting investigations, and developing playbooks, with emphasis on security event analysis across logs, endpoints, networks, and cloud environments.

Qualifications

• Bachelor’s Degree in Computer Science/Information Security or equivalent.
• GCFA, GREM, GNFA, GCTI, CISSP or other relevant certifications preferred.
• Preferably 5+ years of experience as an incident responder/digital forensics/malware analysis.

Responsabilités

• Lead incident response activities through all phases of an incident.
• Triage and investigate potential cyber security incidents to determine incident scope and severity.
• Develop and execute containment strategies.
• Perform investigations and root cause analysis to identify attack vectors, tactics, and impact.
• Conduct comprehensive security event log analysis across data sources (EDR, network, app, cloud).
• Conduct digital forensic acquisition and analysis from endpoints, servers, networks, cloud, and mobile devices.
• Maintain clear stakeholder communication and prepare post-incident reports with preventive recommendations.
• Provide input for automating Security Operations (e.g., SOAR playbooks).
• Develop and test incident response playbooks and processes.
• Maintain awareness of cyber security landscape and threat actor TTPs.

Connaissances

Log analysis

Digital forensics

Incident response

Security operations automation

Cloud/containers knowledge

Communication skills

Formation

Bachelor's Degree in Computer Science/Information Security

Outils

Splunk

ELK Stack

Google SecOps

AXIOM

FTK

Autopsy

Description du poste

Our Client is an established company in Singapore, who is seeking to recruit a Lead IT Specialist (Cybersecurity Incident Response).

Key Responsibilities

The successful candidate will ensure the delivery of cybersecurity operations services across all stages of the incident response lifecycle. This encompasses triaging potential security events, conducting in-depth investigationsand advising oncontainment,eradicationand recovery strategies.Candidatemustpossessstrong log analysis and digital forensics skills todriveeffective responses to cybersecurity incidents that ensure secure delivery of applications and infrastructure services.Critical thinking andgreatcommunicationskills arerequiredto articulate technical concepts and guide decision makers towardsoptimalcourses of action.

What you will be working on:

• Lead incident response activities through all phases of an incident:
• Conduct triage and investigation of potential cyber security incidents to determine incident scope and severity
• Develop and execute containment strategies
• Perform investigations and root cause analysis to identify attack vectors, tactics, and impact
• Conduct comprehensive security event log analysis to validate security detections, investigate alerts, and identify attacks across multiple data sources including:
• Endpoint system logs or Endpoint detection and response (EDR) telemetry
• Network traffic logs
• Application logs
• Cloud service logs and audit trails
• Conduct digital forensic acquisition and analysis of artifacts from various sources including:
• Endpoint systems and servers
• Network devices and logs
• Cloud environments
• Mobile devices and storage media
• Maintain clear stakeholder communication throughout incident lifecycle and prepare comprehensive post-incident reports with preventive recommendations
• Provide expert input for automating Security Operations(E.gImplementSOAR playbooks)
• Develop and test incident response playbooks and processes
• Maintain situational awareness of cyber security landscape and emerging threat actor TTPs

Requirements

• Bachelor’s Degree in Computer Science/Information Securityor equivalent
• Professional certifications, including GCFA, GREM, GNFA, GCTI, CISSP or other relevant certifications will be preferred
• Preferably 5 years or more of experience as a full-time incident responder/digital forensic/malware analysis or related discipline
• Understanding of operating systems and platform (e.g. Windows, Linux) and knowledge of computer networking, LAN, and server
• Strong ability with log analysis techniques, familiarity with platforms(e.g., Splunk, ELK Stack, Google SecOps) and analytical skills to correlate events across multiple log sources to identify attack patterns
• Proficient in Forensic Tools such as AXIOM, FTK or Autopsy
• Ability to perform basic static and dynamic malware analysis and to analyse network and application logs
• Good working knowledge of Cloud and Container technologies are a plus
• Familiarity with good security practices
• Good communication and interpersonal skills, with the ability to multitask and priortise
• Meticulous and demonstrate a high degree of integrity, initiative, energy and endurance

We thank all applicants in advance and regret that only short listed candidates will be notified.