Security Operations Lead — Incident Response & Threat Hunting

Newbridge; Singapore; On-site; SGD 120,000 - 180,000; Full time

Job summary

Newbridge is seeking a senior Cyber Security leader to build and run a resilient, intelligence-led defence operation. You will manage a team of internal analysts, govern external SOC/MSSP partners, and partner with technology teams to embed security across cloud, on-premise, and media production environments.

You will own end-to-end SecOps processes, drive automation, and shepherd incident response, threat hunting and intelligence sharing. Strong leadership and communication are essential.

Qualifications

• 7+ years of progressive experience in Cyber Security, with leadership of SecOps teams.
• Proven track record in incident response, crisis management and threat hunting at scale.
• Strong practitioner-level expertise across SIEM, SOAR, EDR and TIP.
• Deep cloud security knowledge across AWS/Azure/GCP and content workflows.
• Knowledge of MITRE ATT&CK and operationalization for detection coverage.
• Proficiency in scripting and analytics (Python, PowerShell, KQL, SPL).
• Outstanding leadership and ability to brief executives under pressure.

Responsibilities

• Lead a security operations team of 4–5 analysts; provide direction and prioritization.
• Govern third‑party SOC/MSSP relationships and drive SLA adherence.
• Own end‑to‑end SecOps processes and drive automation to improve MTTD/MTTR.
• Engineer detections, tune SOC runbooks and exercise IR playbooks.
• Engage with Cloud/IT/DevOps to ensure security controls are effectively deployed.
• Report SecOps performance and risk posture to CISO and leadership.

Skills

Leadership

Incident response

Threat hunting

SIEM, SOAR, EDR, TIP

Cloud security

Scripting & analytics

Executive communication

Tools

Splunk

Microsoft Sentinel

SOAR

EDR

MITRE ATT&CK

Job description

Newbridge is seeking a senior Cyber Security leader to build and run a resilient, intelligence-led defence operation. You will manage a team of internal analysts, govern external SOC/MSSP partners, and partner with technology teams to embed security across cloud, on-premise, and media production environments.

You will own end-to-end SecOps processes, drive automation, and shepherd incident response, threat hunting and intelligence sharing. Strong leadership and communication are essential.