Security Operations Expert

Sephora USA, Inc; Singapore; On-site; SGD 120,000 - 180,000; Full time

Job summary

Sephora SEA is seeking a Security Operations Expert to be a technical leader in alert management, incident response and crisis management. You will partner with Global and Regional cyber defense teams to advance tooling, processes and defenses across SEA.

You will own security validation of CICD pipelines, oversee follow-the-sun incident response in SEA timezone, lead forensic investigations, and help shape the cyber defense roadmap with CISO and Global teams.

Qualifications

• At least 5 years in cyber security and hands-on security tooling experience.
• Experience with security operations, SOC duties, incident response, investigations, or red teaming.

Responsibilities

• Lead follow-the-sun alert management and incident response for SEA timezone.
• Drive continuous improvement of security processes and tooling with regional/global stakeholders.
• Perform detailed forensic investigations of security incidents and data breaches.
• Support CICD security validation, SAST/DAST/SCA, and API security initiatives.
• Develop and maintain the Cyber Defense roadmap with CISO and Global teams.

Skills

SIEM

EDR

NDR

CAASM

CSPM

WAF

SAST/DAST/SCA

Firewalls

API security

Incident response

Red teaming

Education

Bachelor's degree in Cyber Security

Job description

At Sephora, beauty is about feeling seen, valued, and empowered, individually and collectively. It is connecting deeply with others, celebrating diversity and inclusivity, unlocking your potential and making a difference every day. Together, we belong to something beautiful.

Sephora SEA’s omni channel business spans over 8 countries (Australia, India, Indonesia, Malaysia, New Zealand, the Philippines, Singapore and Thailand) with 100+ stores and boasts some global flagships such as ION and Raffles City in Singapore, F88 in Kuala Lumpur and Pitt Street in Sydney. Sephora SEA is experiencing rapid growth in the region with new store openings and business channels (i.e., Click and collect and marketplace).

Security Operations Expert

As a Security Operations Expert, you will be a technical expert with experience with security tooling and capabilities, alert management, incident response and crisis management.

This role will be responsible for driving continuous improvement of processes and technologies and aligning cyber defense strategies and tooling capabilities with regional, Global, and LVMH Group stakeholders to meet the organization’s overall security goals.

You will shine here if you enjoy…

• DevSecOps
  • Working with Global and Group Cyber Defense teams to optimize the coverage and integration of key Attack Surface Management tools including SIEM, EDR, NDR, CAASM, CSPM, WAF, VA, and threat intelligence platforms
• Projects and Tooling
  • Owning the delivery of technical projects in the Security Roadmap including Cloud Backup review, Remediation initiatives, DLP, USB blocking, API and Firewall reviews
  • Owning local coordination of Bug bounty program including remediation from local teams
  • Supporting the Engineering and DevSecOps teams with Security validation of their CICD pipeline and optimization of SAST/DAST/SCA/WAF capabilities
  • Leading follow-the-sun alert management and Incident Response efforts for SEA timezone, ensuring timely, coordinated, and effective responses to security incidents, from detection to resolution and recovery
  • Overseeing the regional Cyber Crisis Management process and ensure it is implemented, maintained and stakeholders are trained on their responsibilities during a crisis
• Cyber Defense
  • Leading detailed forensic investigations of security incidents, including data breaches, malware outbreaks, targeted attacks and fraud
  • Working with the CISO and Global functions, developing and maintaining the Cyber Defense roadmap, focusing on detection coverage, evolving threats, and new technologies
  • Providing support for key retail events via monitoring, response and containment of cyber attacks and fraud attempts

We would love to hear from you if you are/have…

• At least 5 years of experience in cyber security
• A strong understanding of security technologies and tools, including SIEM, EDR, NDR, CAASM, CSPM, WAF, VA, SAST/DAST/SCA, firewalls and API security
• Experience in security operations, SOC analyst duties, incident response, investigations and penetration testing and/or red teaming
• Stakeholder management skills and experience working with regional and global teams to define and deliver aligned goals will be a plus
• A desire to learn and grow, deal with uncertainty, think outside the box, and a collaborative attitude

Here, you will find:

• Community, in which authenticity is embraced, and the strength of our differences fuels our collective spirit
• Culture of empowerment, learning & growth, that offers you the tools, space and opportunity to learn, innovate and lead
• Work that brings fulfilment, from delighting clients every day, to inspiring our industry at large, every action makes a difference

It is in the Sephora DNA to champion a world of inspiration and inclusion where everyone can celebrate their beauty. You can be yourself, because you are what sets us apart. Join us and belong to something beautiful.

Sephora is proud to be an equal opportunity workplace for all. We do not discriminate in recruitment, hiring, training, advancement, or other employment practices. We celebrate diversity and are committed to creating and fostering an inclusive environment for all employees.