Senior Cyber Incident Responder

Starhub Ltd; Singapore; On-site; SGD 38,000 - 56,000; Full time

Job summary

StarHub Ltd. in Petaling Jaya, Malaysia, seeks a Senior Incident Response Specialist to monitor, detect, and investigate cybersecurity incidents within the SOC framework.

You will triage, contain, and coordinate with CSIRT and IT teams to ensure rapid containment and remediation. The role demands hands-on SIEM work, log analysis across on-prem and cloud environments, and ongoing use-case improvement using MITRE ATT&CK mappings.

Qualifications

• 2–3 years of experience in a SOC or Incident Response (L2) environment.
• Hands-on experience with SIEM platforms, preferably Elastic Stack.
• Experience in incident triage, malware analysis, phishing response, and log correlation.
• Knowledge of MITRE ATT&CK framework mapping.
• Ability to analyze complex alerts and distinguish real threats.
• Familiarity with EDR/NDR tools and threat intelligence sources.
• Good communication and documentation skills for stakeholder updates.
• Certifications such as CEH, CompTIA Security+, GCIA, or Elastic Certified Analyst preferred.

Responsibilities

• Monitor alerts generated from the SOC/SIEM and perform initial to intermediate-level investigations.
• Review and validate security events from multiple log sources and identify legitimate threats.
• Perform deep-dive investigations for incidents involving malware, phishing, insider threats, and cloud breaches.
• Assist in detection rule creation and tuning under the guidance of senior incident responders.
• Use frameworks like MITRE ATT&CK for mapping and improving detection quality.
• Conduct threat hunting using Elastic Stack and related tools.
• Collaborate with MSSP, CSIRT, and IT infrastructure teams to ensure timely incident handling.
• Support incident response reporting, evidence collection, and documentation for compliance and audit.
• Contribute to automation opportunities in detection and response workflows.
• Participate in training sessions, simulations, and tabletop exercises to enhance readiness.
• Responsible for the log source onboarding and managing the continuous logs availability on the SIEM platform.

Skills

SOC / Incident Response

SIEM (Elastic Stack)

Malware analysis

Phishing response

Log correlation

MITRE ATT&CK framework

EDR / NDR tools

Threat intelligence

Communication & documentation

Certifications (CEH, Security+, GCIA,/

Tools

Elastic Stack

EDR

NDR

SOAR platforms

Job description

StarHub Ltd. in Petaling Jaya, Malaysia, seeks a Senior Incident Response Specialist to monitor, detect, and investigate cybersecurity incidents within the SOC framework.

You will triage, contain, and coordinate with CSIRT and IT teams to ensure rapid containment and remediation. The role demands hands-on SIEM work, log analysis across on-prem and cloud environments, and ongoing use-case improvement using MITRE ATT&CK mappings.