Senior Cyber Security Incident Response Engineer

Antaes Asia; Singapore; On-site; SGD 90,000 - 130,000; Full time

Job summary

Antaes Asia seeks an experienced cyber security incident response lead to manage end-to-end IR engagements in Singapore. You will triage, contain, eradicate, recover and conduct post-incident reviews, coordinating with technical teams and stakeholders.

You will translate MITRE ATT&CK into actionable detections, build content with YARA and Sigma, and hunt threats using Tanium EDR and Elastic/Kibana. Strong scripting in Python/PowerShell is required.

Qualifications

• 3-6 years experience leading real-world incident response.
• Hands-on expertise with Tanium EDR and Elastic/Kibana (SIEM).
• Strong command of detection engineering: MITRE ATT&CK, Sigma, YARA.
• Practical malware, phishing and domain analysis skills.
• Scripting and automation in Python and/or PowerShell.
• Strong analytical mindset, composure under pressure, and clear written and spoken English.

Responsibilities

• Lead end-to-end cyber incident response, from triage and containment to eradication, recovery and post-incident review, with minimal supervision.
• Translate MITRE ATT&CK techniques into high-fidelity, actionable detection rules, and tune them to reduce false positives.
• Build and maintain detection content using YARA and Sigma.
• Investigate and analyse sophisticated threats: phishing campaigns, malicious domains, malware samples and actively exploited vulnerabilities.
• Use Tanium EDR for endpoint investigation, threat hunting and remediation.
• Use Elastic/Kibana (SIEM) for log analysis, correlation, dashboards and alerting.
• Automate security workflows and response playbooks with Python or PowerShell.
• Document findings and communicate clearly with technical teams and stakeholders during and after incidents.

Skills

Tanium EDR

Elastic/Kibana

MITRE ATT&CK

Sigma

YARA

Python

PowerShell

Phishing analysis

Domain analysis

Incident response leadership

English communication

Tools

Tanium EDR

Elastic/Kibana

YARA

Sigma

Job description

Antaes Asia seeks an experienced cyber security incident response lead to manage end-to-end IR engagements in Singapore. You will triage, contain, eradicate, recover and conduct post-incident reviews, coordinating with technical teams and stakeholders.

You will translate MITRE ATT&CK into actionable detections, build content with YARA and Sigma, and hunt threats using Tanium EDR and Elastic/Kibana. Strong scripting in Python/PowerShell is required.