Lead, Security Operations & Incident Response

Newbridge; Singapore; On-site; SGD 120,000 - 180,000; Full time

Job summary

Newbridge is seeking a senior Cyber Security leader to build and run a resilient, intelligence-led defence operation. You will manage a team of internal analysts, govern external SOC/MSSP partners, and partner with technology teams to embed security across cloud, on-premise, and media production environments.

You will own end-to-end SecOps processes, drive automation, and shepherd incident response, threat hunting and intelligence sharing. Strong leadership and communication are essential.

Qualifications

• 7+ years of progressive experience in Cyber Security, with leadership of SecOps teams.
• Proven track record in incident response, crisis management and threat hunting at scale.
• Strong practitioner-level expertise across SIEM, SOAR, EDR and TIP.
• Deep cloud security knowledge across AWS/Azure/GCP and content workflows.
• Knowledge of MITRE ATT&CK and operationalization for detection coverage.
• Proficiency in scripting and analytics (Python, PowerShell, KQL, SPL).
• Outstanding leadership and ability to brief executives under pressure.

Responsibilities

• Lead a security operations team of 4–5 analysts; provide direction and prioritization.
• Govern third‑party SOC/MSSP relationships and drive SLA adherence.
• Own end‑to‑end SecOps processes and drive automation to improve MTTD/MTTR.
• Engineer detections, tune SOC runbooks and exercise IR playbooks.
• Engage with Cloud/IT/DevOps to ensure security controls are effectively deployed.
• Report SecOps performance and risk posture to CISO and leadership.

Skills

Leadership

Incident response

Threat hunting

SIEM, SOAR, EDR, TIP

Cloud security

Scripting & analytics

Executive communication

Tools

Splunk

Microsoft Sentinel

SOAR

EDR

MITRE ATT&CK

Job description

You will be accountable for building a resilient, intelligence-led defence operation. This includes leading a team of internal analysts, governing external SOC/MSSP partners, and partnering with technology teams to embed security across cloud, on-premise, and media production environments.

Key Accountabilities

A. Security Operations & Team Leadership

• Manage, coach and develop a team of 4-5 security analysts; provide direction, prioritization and quality oversight.
• Govern third-party SOC / MSSP relationships — drive SLA adherence, service improvement and value realization.
• Own the end-to-end SecOps process and drive automation to improve MTTD / MTTR.
• Manage budgets, vendor contracts, and evaluation / rollout of new defence tooling.

B. Threat Detection, Hunting & Response

• Take ownership of real-time monitoring, alert triage and proactive hunting activities to pre-empt threats.
• Serve as the senior escalation for critical incidents (SIRM function) — orchestrate containment, eradication, recovery and lessons-learned.
• Engineer and continuously tune detections, correlation logic and hunt playbooks across SIEM and EDR stacks.
• Author and regularly exercise IR playbooks, escalation matrices and crisis communication plans; ensure readiness through tabletop exercises.

C. Intelligence & Cross-Functional Partnership

• Operationalize threat intelligence — ingest, contextualize and apply intel to detection and response.
• Keep abreast of emerging threats, adversary TTPs and threat actor campaigns, particularly those targeting media & content platforms.
• Engage with external intel-sharing forums, regulators, and technology partners to strengthen collective defence.
• Work in lockstep with Cloud, DevOps, IT and Infrastructure teams to ensure security controls (firewall, IDS/IPS, encryption, IAM) are architected and operated effectively.

D. Governance & Reporting

• Report SecOps performance, risk posture and improvement roadmaps to the CISO and senior leadership through clear metrics and KPIs.
• Ensure operations remain compliant with NIST CSF, ISO 27001, GDPR, SOC 2 and other applicable standards.

What You Bring

• 7+ years of progressive experience in Cyber Security, with at least 3 years managing a SecOps / SOC team in an enterprise or hybrid outsourced model.
• Demonstrated success leading complex incident response, crisis management and threat hunting at scale.
• Strong practitioner-level expertise across SIEM (Splunk, Sentinel etc.), SOAR, EDR and TIP.
• Solid grasp of cloud security across AWS / Azure / GCP; experience securing streaming, OTT or content delivery workflows is highly desirable.
• Deep understanding of MITRE ATT&CK and how to operationalize it for detection coverage.
• Working knowledge of scripting & analytics — Python, PowerShell, KQL, SPL or similar.
• Outstanding leadership, communication and stakeholder influence — able to brief senior executives under pressure.
• Industry certifications are a plus: CISSP, CISM, GCIH, ECIH, CCSP, AWS Security Specialty, Azure Security Engineer.