Lead, Security Operations & Incident Response

NEWBRIDGE ALLIANCE PTE. LTD.; Singapore; On-site; SGD 120,000 - 180,000; Full time

Job summary

NEWBRIDGE ALLIANCE PTE. LTD. is seeking a senior Cyber Security leader in Singapore to head SecOps. You will manage a team, govern SOC/MSSP partners and drive security across cloud, on-premise, and media workflows.

You will own end-to-end SecOps, run threat detection, hunting, response, and incident management, while integrating threat intel and reporting to the CISO. A strong leadership track record and cloud security expertise are essential.

Qualifications

• 7+ years of Cyber Security experience with at least 3 years leading SecOps teams.
• Proven incident response, crisis management and threat hunting at scale.
• Expertise across SIEM, SOAR, EDR and TIP.
• Cloud security across AWS/Azure/GCP; experience with media/content platforms.
• MITRE ATT&CK knowledge and operationalization for detection.
• Scripting & analytics: Python, PowerShell, KQL, SPL.
• Outstanding leadership and communication; briefing executives.
• Certifications such as CISSP, CISM etc are a plus.

Responsibilities

• Lead a team of 4–5 security analysts with direction and quality oversight.
• Govern third-party SOC/MSSP relationships and drive SLA adherence.
• Own end-to-end SecOps and automate to improve MTTD/MTTR.
• Manage budgets, vendor contracts and new defence tooling.
• Real-time monitoring, alert triage and proactive hunting.
• Senior escalation for critical incidents (SIRMs): containment and recovery.
• Tune detections and playbooks across SIEM/EDR stacks.
• Develop IR playbooks and conduct tabletop exercises.
• Operationalise threat intelligence and apply it to detection.
• Collaborate with Cloud/DevOps/IT to secure controls.
• Report SecOps metrics to CISO and leadership; ensure compliance.

Skills

Security leadership

SecOps

Incident response

Threat hunting

SIEM

EDR

SOAR

Cloud security

MITRE ATT&CK

Scripting

Tools

Splunk

Microsoft Sentinel

SOAR platform

EDR tooling

TIP

Job description

You will be accountable for building a resilient, intelligence-led defence operation. This includes leading a team of internal analysts, governing external SOC/MSSP partners, and partnering with technology teams to embed security across cloud, on-premise, and media production environments.

Key Accountabilities

• A. Security Operations & Team Leadership
  • Manage, coach and develop a team of 4-5 security analysts; provide direction, prioritization and quality oversight.
  • Govern third-party SOC / MSSP relationships - drive SLA adherence, service improvement and value realization.
  • Own the end-to-end SecOps process and drive automation to improve MTTD / MTTR.
  • Manage budgets, vendor contracts, and evaluation / rollout of new defence tooling.
• B. Threat Detection, Hunting & Response
  • Take ownership of real-time monitoring, alert triage and proactive hunting activities to pre-empt threats.
  • Serve as the senior escalation for critical incidents (SIRM function) - orchestrate containment, eradication, recovery and lessons-learned.
  • Engineer and continuously tune detections, correlation logic and hunt playbooks across SIEM and EDR stacks.
  • Author and regularly exercise IR playbooks, escalation matrices and crisis communication plans; ensure readiness through tabletop exercises.
• C. Intelligence & Cross-Functional Partnership
  • Operationalise threat intelligence - ingest, contextualise and apply intel to detection and response.
  • Keep abreast of emerging threats, adversary TTPs and threat actor campaigns, particularly those targeting media & content platforms.
  • Engage with external intel-sharing forums, regulators, and technology partners to strengthen collective defence.
  • Work in lockstep with Cloud, DevOps, IT and Infrastructure teams to ensure security controls (firewall, IDS/IPS, encryption, IAM) are architected and operated effectively.
• D. Governance & Reporting
  • Report SecOps performance, risk posture and improvement roadmaps to the CISO and senior leadership through clear metrics and KPIs.
  • Ensure operations remain compliant with NIST CSF, ISO 27001, GDPR, SOC 2 and other applicable standards.

What You Bring

• 7+ years of progressive experience in Cyber Security, with at least 3 years managing a SecOps / SOC team in an enterprise or hybrid outsourced model.
• Demonstrated success leading complex incident response, crisis management and threat hunting at scale.
• Strong practitioner-level expertise across SIEM (Splunk, Sentinel etc.), SOAR, EDR and TIP.
• Solid grasp of cloud security across AWS / Azure / GCP; experience securing streaming, OTT or content delivery workflows is highly desirable.
• Deep understanding of MITRE ATT&CK and how to operationalise it for detection coverage.
• Working knowledge of scripting & analytics - Python, PowerShell, KQL, SPL or similar.
• Outstanding leadership, communication and stakeholder influence - able to brief senior executives under pressure.
• Industry certifications are a plus: CISSP, CISM, GCIH, ECIH, CCSP, AWS Security Specialty, Azure Security Engineer.