Security Incident Response Lead | Threat Hunting & IR

Central Provident Fund Board; Singapore; Hybrid; SGD 90,000 - 130,000; Full time

Benefits offered by this job

Hybrid work model

Annual leave

Medical and dental benefits

Recreational activities

Job summary

Central Provident Fund Board is seeking a Security Incident Responder to lead active incidents within the Security Incident Response Team. The role involves coordinating containment, eradication, and recovery while guiding L1 SOC analysts and partners across infrastructure, networks, and applications.

You will contribute to threat intelligence, hunting exercises, and red/purple team engagements, applying ITIL-based processes and ensuring timely communications to stakeholders and authorities

Qualifications

• Experience in security operations, incident response, or related cybersecurity roles.

Responsibilities

• Act as technical lead during active security incidents.
• Coordinate response actions across technical teams and stakeholders.
• Lead post-incident reviews and root cause analyses.
• Prepare incident reports and regulatory communications as required.
• Provide guidance to L1 SOC analysts during high-severity incidents.

Skills

Security incident response

SIEM platforms

Incident management

Threat hunting

Red team / Purple team

Education

GCIH, GCFA, CISSP, CISM, OSCP or equivalent

Tools

EDR/XDR

WAF

NDR/IDS/IPS

Vulnerability management tools

Job description

Central Provident Fund Board is seeking a Security Incident Responder to lead active incidents within the Security Incident Response Team. The role involves coordinating containment, eradication, and recovery while guiding L1 SOC analysts and partners across infrastructure, networks, and applications.

You will contribute to threat intelligence, hunting exercises, and red/purple team engagements, applying ITIL-based processes and ensuring timely communications to stakeholders and authorities