Senior Cyber Incident Response Leader

Government Technology Agency; Singapore; On-site; SGD 120,000 - 180,000; Full time

Benefits offered by this job

Flexible work arrangements

Total rewards

Employee wellness programmes

Job summary

GovTech in Singapore seeks a seasoned Cybersecurity Operations Specialist (Incident Response) to join the Cyber DefenseOps & Intelligence team. You will lead incident response activities, triage events, and conduct in-depth investigations to contain and recover from cybersecurity incidents across systems and cloud environments.

The role requires strong log analysis skills and familiarity with Splunk/ELK and forensic tools, with the ability to communicate findings to decision makers.

Qualifications

• Bachelor’s Degree in Computer Science/Information Security or equivalent.
• Professional certifications such as GCFA, GREM, GNFA, GCTI, CISSP preferred.
• 5+ years experience as incident responder/digital forensics/malware analysis.
• Strong OS and networking knowledge (Windows/Linux), with basic cloud awareness.
• Proficient in log analysis with Splunk/ELK and forensic tools AXIOM/FTK/Autopsy.
• Excellent communication and ability to correlate events across sources.
• Knowledge of cloud/containers is a plus.

Responsibilities

• Lead incident response activities through all phases of an incident.
• Triage and investigate security incidents to determine scope and severity.
• Develop and execute containment strategies.
• Perform investigations and root cause analysis to identify attack vectors.
• Conduct comprehensive security event log analysis across endpoints, networks, apps, and cloud.
• Conduct digital forensic acquisition and analysis of artifacts.
• Maintain stakeholder communications and prepare post-incident reports with preventive recommendations.
• Provide expert input for automating Security Operations (SOAR playbooks).
• Develop and test incident response playbooks and processes.
• Maintain situational awareness of cyber security landscape and threat actor TTPs.

Skills

Incident response

Digital forensics

Log analysis

Cybersecurity operations

Root cause analysis

Threat hunting

Communication

Team collaboration

Education

Bachelor's in Computer Science / Information Security

Tools

Splunk

ELK Stack

AXIOM

FTK

Autopsy

EDR

Job description

GovTech in Singapore seeks a seasoned Cybersecurity Operations Specialist (Incident Response) to join the Cyber DefenseOps & Intelligence team. You will lead incident response activities, triage events, and conduct in-depth investigations to contain and recover from cybersecurity incidents across systems and cloud environments.

The role requires strong log analysis skills and familiarity with Splunk/ELK and forensic tools, with the ability to communicate findings to decision makers.