Security Operations Lead — Microsoft Sentinel & IR

EPAM Systems; Singapore; On-site; SGD 120,000 - 180,000; Full time

Benefits offered by this job

Great place to work

Global collaboration

Training programs and certs

Job summary

EPAM Systems in Singapore is seeking a Security Operations Lead (Microsoft Sentinel) to strengthen detection and incident response for a lean hedge fund environment. You will own Sentinel tuning, triage escalations and drive vendor-led SOC operations.

You will translate alerts, vulnerabilities and posture data into clear actions and reporting, mentor the Security Operations Analyst, and contribute to audit-ready processes while partnering with global teams.

Qualifications

• Proven experience leading security operations in a hands-on capacity.
• Strong background in Microsoft Sentinel including rule tuning, workbooks, hunting and detection engineering.
• Hands-on experience with Microsoft Defender for Endpoint and Microsoft Defender for Cloud.
• Demonstrated ability to manage an outsourced SOC/MDR service including escalations and performance governance.
• Knowledge of incident response practices including severity assessment, coordination and post-incident reviews.
• Experience with Jira Service Management and end-to-end ticket lifecycle ownership.
• Strong understanding of Vulnerability Management including scanning, remediation tracking and patch governance.
• Clear communication with confidence translating operational metrics into management-ready reporting.

Responsibilities

• Own Microsoft Sentinel detections including analytics rules, workbooks and KQL queries.
• Lead day-to-day SOC and incident operations with an outsourced SOC/MDR vendor including SLAs, escalations and service reviews.
• Validate log source coverage across endpoint, identity, network, cloud and critical business systems.
• Triage and coordinate incident response from assessment through containment, remediation and closure in Jira Service Management.
• Improve signal quality by reducing false positives and tracking Mean Time to Detect and Mean Time to Respond.
• Run post-incident reviews and update detections, runbooks and incident response playbooks.
• Own vulnerability scanning cadence, maintain a remediation register and track patching against agreed SLAs.
• Mentor and support the Security Operations Analyst while building repeatable, audit-ready processes.

Skills

Security operations

Sentinel tuning

KQL queries

Incident response

Ticket lifecycle

Vulnerability management

Jira Service Management

Metrics reporting

Tools

Microsoft Defender for Endpoint

Microsoft Defender for Cloud

Job description

EPAM Systems in Singapore is seeking a Security Operations Lead (Microsoft Sentinel) to strengthen detection and incident response for a lean hedge fund environment. You will own Sentinel tuning, triage escalations and drive vendor-led SOC operations.

You will translate alerts, vulnerabilities and posture data into clear actions and reporting, mentor the Security Operations Analyst, and contribute to audit-ready processes while partnering with global teams.