Security Operations Expert at Sephora

Sephora; Singapore; On-site; SGD 120,000 - 180,000; Full time

Job summary

Sephora Singapore is seeking a Security Operations Expert to join our regional security team. You will act as a technical leader, drive incident response, and align defenses with global stakeholders to protect our retail and digital channels.

You will own security tooling, alert management, and crisis readiness, while continuously improving processes and coordinating follow-the-sun security operations for SEA. Strong collaboration with engineering and security teams is essential.

Qualifications

• 5+ years of cybersecurity experience.
• Experience with SOC operations and incident response.
• Ability to coordinate with regional/global teams and manage stakeholders.

Responsibilities

• Lead security operations and incident response across SEA timezone.
• Drive continuous improvement of security processes and tooling.
• Collaborate with Global and LVMH stakeholders on cyber defense roadmap.
• Support CICD security validation with SAST/DAST/SCA/WAF.
• Oversee cyber crisis management readiness and training.
• Monitor and contain cyber attacks during retail events.

Tools

SIEM

EDR

NDR

CAASM

CSPM

WAF

Vulnerability Assessment

SAST/DAST/SCA

API security

Firewalls

Job description

Security Operations Expert

Security Operations Expert at Sephora in Singapore, S00, SG. This Full time on site position offers great opportunities for career growth.

At Sephora, beauty is about feeling seen, valued, and empowered, individually and collectively. It is connecting deeply with others, celebrating diversity and inclusivity, unlocking your potential and making a difference every day. Together, we belong to something beautiful.

Sephora SEA’s omni channel business spans over 8 countries (Australia, India, Indonesia, Malaysia, New Zealand, the Philippines, Singapore and Thailand) with 100+ stores and boasts some global flagships such as ION and Raffles City in Singapore, F88 in Kuala Lumpur and Pitt Street in Sydney. Sephora SEA is experiencing rapid growth in the region with new store openings and business channels (i.e., Click and collect and marketplace).

As a Security Operations Expert, you will be a technical expert with experience with security tooling and capabilities, alert management, incident response and crisis management. This role will be responsible for driving continuous improvement of processes and technologies and aligning cyber defense strategies and tooling capabilities with regional, Global, and LVMH Group stakeholders to meet the organization’s overall security goals.

You will shine here if you enjoy…

• DevSecOps Working with Global and Group Cyber Defense teams to optimize the coverage and integration of key Attack Surface Management tools including SIEM, EDR, NDR, CAASM, CSPM, WAF, VA, and threat intelligence platforms
• Projects and Tooling Owning the delivery of technical projects in the Security Roadmap including Cloud Backup review, Remediation initiatives, DLP, USB blocking, API and Firewall reviews
• Owning local coordination of Bug bounty program including remediation from local teams
• Supporting the Engineering and DevSecOps teams with Security validation of their CICD pipeline and optimization of SAST/DAST/SCA/WAF capabilities
• Leading follow-the-sun alert management and Incident Response efforts for SEA timezone, ensuring timely, coordinated, and effective responses to security incidents, from detection to resolution and recovery
• Overseeing the regional Cyber Crisis Management process and ensure it is implemented, maintained and stakeholders are trained on their responsibilities during a crisis
• Cyber Defense Leading detailed forensic investigations of security incidents, including data breaches, malware outbreaks, targeted attacks and fraud
• Working with the CISO and Global functions, developing and maintaining the Cyber Defense roadmap, focusing on detection coverage, evolving threats, and new technologies
• Providing support for key retail events via monitoring, response and containment of cyber attacks and fraud attempts

We would love to hear from you if you are/have…

Requirements

• At least 5 years of experience in cyber security
• A strong understanding of security technologies and tools, including SIEM, EDR, NDR, CAASM, CSPM, WAF, VA, SAST/DAST/SCA, firewalls and API security
• Experience in security operations, SOC analyst duties, incident response, investigations and penetration testing and/or red teaming
• Stakeholder management skills and experience working with regional and global teams to define and deliver aligned goals will be a plus
• A desire to learn and grow, deal with uncertainty, think outside the box, and a collaborative attitude

Here, you will find:

• Community, in which authenticity is embraced, and the strength of our differences fuels our collective spirit
• Culture of empowerment, learning \& growth, that offers you the tools, space and opportunity to learn, innovate and lead
• Work that brings fulfilment, from delighting clients every day, to inspiring our industry at large, every action makes a difference

Sephora is proud to be an equal opportunity workplace for all. We do not discriminate in recruitment, hiring, training, advancement, or other employment practices. We celebrate diversity and are committed to creating and fostering an inclusive environment for all employees.