Senior Cybersecurity Operations & Incident Response Lead

Starhub Ltd; Singapore; On-site; SGD 90,000 - 150,000; Full time

Job summary

Starhub Ltd in Singapore is seeking a Cybersecurity Operations & Incident Response professional to analyse vulnerability management performance, identify remediation SLA breaches, review endpoint security coverage (EDR, DLP, Antivirus), and assess configuration compliance against Gold Images and CIS benchmarks.

You will review SOC monitoring, alert handling, incident escalation, and root cause analysis for security control failures, validate asset inventories against CMDB and network discovery,

Responsibilities

• Analyse vulnerability management performance and identify remediation SLA breaches.
• Review endpoint security coverage and health (EDR, DLP, Antivirus).
• Assess configuration compliance against Gold Images and CIS benchmarks.
• Review SOC monitoring, alert handling, incident escalation, and SLA adherence.
• Review and challenge incident response handling and root cause analysis for security control failures.
• Validate asset inventories by reconciling CMDB data with active network discovery.
• Review network segmentation and firewall rules for flat network risks and overly permissive access.
• Support CyberTrust Mark readiness through gap assessment and remediation tracking.
• Validate network security controls against CSA 19 requirements.
• Perform independent 2LOD validation of control design, effectiveness, and remediation closure.
• Contribute to security architecture and governance reviews (governance led separately).
• Support audits through technical evidence preparation and control walkthroughs.

Job description

Starhub Ltd in Singapore is seeking a Cybersecurity Operations & Incident Response professional to analyse vulnerability management performance, identify remediation SLA breaches, review endpoint security coverage (EDR, DLP, Antivirus), and assess configuration compliance against Gold Images and CIS benchmarks.

You will review SOC monitoring, alert handling, incident escalation, and root cause analysis for security control failures, validate asset inventories against CMDB and network discovery,