Lead Threat Hunter: OT/ICS & DFIR Expert

ST ENGINEERING INFO-SECURITY PTE. LTD; Singapore; Vor Ort; SGD 180.000 - 280.000; Vollzeit

Zusammenfassung

ST Engineering Info-Security PTE. LTD is seeking a hands-on security leader to head proactive threat hunting across OT and enterprise environments. You will own the full hunt lifecycle—from intelligence and hypotheses to telemetry readiness, investigations and evidence-driven reporting.

This role requires senior expertise in ATT&CK, SIEM/UEBA/XDR, and 24x7 SOC operations, plus the ability to mentor hunters, coordinate with DFIR teams, and deliver clear customer-facing findings and improvements.

Qualifikationen

• At least 7 years of cybersecurity experience with a minimum of 5 years in OT/ICS cybersecurity.
• At least 3 years of hands-on threat hunting, DFIR or detection engineering with customer-facing delivery.
• Strong knowledge of MITRE ATT&CK, Windows/Linux artefacts, network forensics and SIEM correlations.
• Familiarity with OT/ICS assets, SIEM/UEBA/XDR/SOAR roles and 24x7 SOC operations.
• Experience with at least one SIEM query language (e.g. Elastic KQL/EQL, Splunk SPL, MS Sentinel KQL).

Aufgaben

• Define risk-based threat hunting strategies and plans for OT and enterprise environments.
• Lead complex IOC-, TTP- and behaviour-driven hunts, perform SIEM correlations and investigations.
• Develop or review hunt analytics and detection use cases; coordinate testing and tuning.
• Coordinate handover to SOC/DFIR and communicate findings to customers with evidence and timelines.
• Mentor hunters, maintain procedures and contribute to content backlog for prevention and detection.

Kenntnisse

Threat hunting

Incident investigation

Detection engineering

SIEM

UEBA

EDR

XDR

SOAR

Customer-facing delivery

Tools

Elastic KQL/EQL

Splunk SPL

Microsoft Sentinel KQL

Jobbeschreibung

ST Engineering Info-Security PTE. LTD is seeking a hands-on security leader to head proactive threat hunting across OT and enterprise environments. You will own the full hunt lifecycle—from intelligence and hypotheses to telemetry readiness, investigations and evidence-driven reporting.

This role requires senior expertise in ATT&CK, SIEM/UEBA/XDR, and 24x7 SOC operations, plus the ability to mentor hunters, coordinate with DFIR teams, and deliver clear customer-facing findings and improvements.