Security Operations Expert

SEPHORA; Singapore; On-site; SGD 70,000 - 100,000; Full time

Benefits offered by this job

Inclusive environment

Opportunities for growth

Empowerment culture

Job summary

SEPHORA in Singapore is seeking a Security Operations Expert to enhance cyber defense strategies and tooling capabilities. The role requires at least 5 years of cyber security experience, focusing on incident response, investigations, and stakeholder management.

Join a diverse team that values authenticity and inclusivity, where every action makes a difference in the beauty industry.

Sephora offers a culture of empowerment and growth, reflecting our commitment to a beautiful and inclusive workplace.

Qualifications

• At least 5 years of experience in cyber security.
• Strong understanding of security technologies and tools.
• Experience in incident response and investigations.

Responsibilities

• Drive continuous improvement of processes and technologies.
• Coordinate local Bug bounty programs.
• Lead alert management and incident response efforts.

Skills

Cyber security experience

Incident response

Stakeholder management

Security tooling skills

Tools

SIEM

EDR

NDR

WAF

Job description

At Sephora, beauty is about feeling seen, valued, and empowered, individually and collectively. It is connecting deeply with others, celebrating diversity and inclusivity, unlocking your potential and making a difference every day. Together, we belong to something beautiful.

Sephora SEA’s omni channel business spans over 8 countries (Australia, India, Indonesia, Malaysia, New Zealand, the Philippines, Singapore and Thailand) with 100+ stores and boasts some global flagships such as ION and Raffles City in Singapore, F88 in Kuala Lumpur and Pitt Street in Sydney. Sephora SEA is experiencing rapid growth in the region with new store openings and business channels (i.e., Click and collect and marketplace).

Security Operations Expert

As a Security Operations Expert, you will be a technical expert with experience with security tooling and capabilities, alert management, incident response and crisis management.

This role will be responsible for driving continuous improvement of processes and technologies and aligning cyber defense strategies and tooling capabilities with regional, Global, and LVMH Group stakeholders to meet the organization’s overall security goals.

You will shine here if you enjoy…

• DevSecOps
  • Working with Global and Group Cyber Defense teams to optimize the coverage and integration of key Attack Surface Management tools including SIEM, EDR, NDR, CAASM, CSPM, WAF, VA, and threat intelligence platforms
• Projects and Tooling
  • Owning the delivery of technical projects in the Security Roadmap including Cloud Backup review, Remediation initiatives, DLP, USB blocking, API and Firewall reviews
  • Owning local coordination of Bug bounty program including remediation from local teams
  • Supporting the Engineering and DevSecOps teams with Security validation of their CICD pipeline and optimization of SAST/DAST/SCA/WAF capabilities
  • Leading follow-the-sun alert management and Incident Response efforts for SEA timezone, ensuring timely, coordinated, and effective responses to security incidents, from detection to resolution and recovery
  • Overseeing the regional Cyber Crisis Management process and ensure it is implemented, maintained and stakeholders are trained on their responsibilities during a crisis
• Cyber Defense
  • Leading detailed forensic investigations of security incidents, including data breaches, malware outbreaks, targeted attacks and fraud
  • Working with the CISO and Global functions, developing and maintaining the Cyber Defense roadmap, focusing on detection coverage, evolving threats, and new technologies
  • Providing support for key retail events via monitoring, response and containment of cyber attacks and fraud attempts

We would love to hear from you if you are/have…

• At least 5 years of experience in cyber security
• A strong understanding of security technologies and tools, including SIEM, EDR, NDR, CAASM, CSPM, WAF, VA, SAST/DAST/SCA, firewalls and API security
• Experience in security operations, SOC analyst duties, incident response, investigations and penetration testing and/or red teaming
• Stakeholder management skills and experience working with regional and global teams to define and deliver aligned goals will be a plus
• A desire to learn and grow, deal with uncertainty, think outside the box, and a collaborative attitude

Here, You Will Find

• Community, in which authenticity is embraced, and the strength of our differences fuels our collective spirit
• Culture of empowerment, learning & growth, that offers you the tools, space and opportunity to learn, innovate and lead
• Work that brings fulfilment, from delighting clients every day, to inspiring our industry at large, every action makes a difference

It is in the Sephora DNA to champion a world of inspiration and inclusion where everyone can celebrate their beauty. You can be yourself, because you are what sets us apart.

Join us and belong to something beautiful.

Sephora is proud to be an equal opportunity workplace for all. We do not discriminate in recruitment, hiring, training, advancement, or other employment practices. We celebrate diversity and are committed to creating and fostering an inclusive environment for all employees.