Lead Security Operations & Incident Response

DYMON ASIA CAPITAL (SINGAPORE) PTE. LTD.; Singapore; On-site; SGD 180,000 - 260,000; Full time

Job summary

Dymon Asia Capital in Singapore seeks a Security Operations Lead to own the Security Operations pillar within Cybersecurity, working with Architecture, Governance, Incident Response, and IT Infrastructure. You will lead monitoring, threat intel, vulnerability mgmt, and training, while coordinating with a managed SOC.

The role requires 8+ years in security operations, experience leading a function in regulated environments, and strong incident response and governance.

Qualifications

• 8+ years in security operations with leadership experience in regulated environments.
• Experience managing or mentoring security analysts and supporting major incidents.
• Experience owning outsourced SOC or MDR provider with contractual governance.
• Operational depth with Microsoft Sentinel and Defender XDR; KQL and hunting.
• Ability to align with MAS guidelines and regulatory incident notification.

Responsibilities

• Own delivery of the Security Operations pillar including monitoring, threat intel, and posture reporting.
• Manage the outsourced SOC relationship, SLAs, escalation quality, and reporting.
• Provide hands-on support to the Incident Response Manager across all incident lifecycle stages.
• Lead major incidents with technical investigation workstreams and containment actions.
• Develop security metrics, evidence, and disaster recovery testing aligned to MAS/NIST.

Skills

Security operations leadership

Incident response support

Outsourced SOC management

Microsoft Sentinel

Defender XDR

MITRE ATT&CK

Vulnerability management

Cloud and identity security ops

Effective communication

Hands-on working lead

Education

Bachelor’s degree in Computer Science/Info Security/Engineering

Tools

Microsoft Sentinel

Defender XDR

Entra ID

Intune

Darktrace

Cisco Umbrella

Nessus

KQL

Job description

Dymon Asia Capital in Singapore seeks a Security Operations Lead to own the Security Operations pillar within Cybersecurity, working with Architecture, Governance, Incident Response, and IT Infrastructure. You will lead monitoring, threat intel, vulnerability mgmt, and training, while coordinating with a managed SOC.

The role requires 8+ years in security operations, experience leading a function in regulated environments, and strong incident response and governance.