Senior Digital Forensics & Incident Response Lead

Info-communications Media Development Authority; Singapore; On-site; SGD 90,000 - 130,000; Full time

Job summary

Info-communications Media Development Authority (IMDA) in Singapore seeks a cybersecurity professional to join the Connectivity, Cybersecurity & Resilience Group. You will investigate incidents, determine root causes, and provide technical guidance to threat assessments.

You will prepare incident reports, update playbooks, and communicate with stakeholders while staying current with cyber threat trends and TTPs. A 5+ year background and relevant certifications are preferred.

Qualifications

• Minimum 5 years of experience in cybersecurity incident investigations or digital forensics.
• Background in Information Security, Computer Science, Engineering or equivalent.
• Certifications GCFA/GCFE/GCIH/GREM are highly regarded.
• Experience working in a Security Operations Centre (SOC) is advantageous.

Responsibilities

• Collaborate with team members to ensure smooth daily operations and task prioritisation.
• Respond to cybersecurity incidents from containment to closure with stakeholders.
• Investigate incidents to determine root cause using log, digital forensics or malware analysis.
• Advise on preventive actions, mitigate techniques, and threat detection rules.
• Prepare and review incident reports and present briefings on attack techniques and malware behaviours.

Skills

Information security

Cybersecurity incident investigations

Digital forensics

SOC experience

Analytical thinking

Communication skills

Growth mindset

Education

Information Security / CS / Engineering degree

Tools

Magnet AXIOM

Encase

X-Ways

FTK

Autopsy

Job description

Info-communications Media Development Authority (IMDA) in Singapore seeks a cybersecurity professional to join the Connectivity, Cybersecurity & Resilience Group. You will investigate incidents, determine root causes, and provide technical guidance to threat assessments.

You will prepare incident reports, update playbooks, and communicate with stakeholders while staying current with cyber threat trends and TTPs. A 5+ year background and relevant certifications are preferred.