Senior Incident Response Expert

resource consulting pte. ltd.; Shenton Way; On-site; SGD 120,000 - 180,000; Full time

Job summary

Sygnia is seeking a Senior Incident Response Expert to lead complex IR engagements, conduct advanced investigations, and deliver professional reports to clients worldwide.

You will work closely with multidisciplinary teams, drive publication efforts, and participate in hiring for IR experts. The role requires 5+ years of IR experience, strong OS forensics knowledge, and travel up to 30%.

Qualifications

• 5+ years of relevant incident response experience.
• Strong analytical and critical-thinking abilities.
• Proactive approach to solving complex security incidents.
• Collaborative work style across multidisciplinary teams with travel.
• Understanding of threat life cycle, attack vectors and OS forensics.

Responsibilities

• Take ownership in core IR effort or an entire work stream and conduct complex IR tasks.
• Technically lead small-scale investigations and proactive engagements.
• Lead client communication on sessions and present reports.
• Participate in ad-hoc scoping calls.
• Lead publication efforts.
• Participate in hiring interviews for IR experts and review assignments.
• Conduct forensic and incident response investigations including large-scale attacks.
• Engage in threat hunting and security assessments.
• Identify IOCs and TTPs to trace breaches.
• Develop and utilize tools to improve investigative stack.
• Collaborate with IT and Security teams during investigations.
• Generate comprehensive reports of findings.

Skills

Incident Response

IR Leadership

Analytical Thinking

Problem Solving

Communication

Python Scripting

Data Analysis

Threat Hunting

Forensic Analysis

OS Forensics

Cloud Awareness

Tools

Splunk

QRadar

ArcSight

Job description

Our client is a top-tier cyber consulting and incident response company, working with organizations worldwide to proactively build their cyber resilience, and to respond to and defeat cyber attacks. Sygnia's trusted advisor of IT and security teams, senior managements, and boards of top organizations, including Fortune 100 companies. It is currently seeking a Senior Incident Response Expert to join their expanding team.

Main Responsibilities:

• Take ownership in core IR effort or an entire work stream, and conduct complex IR tasks
• Technically lead small-scale investigations and small-scale proactive engagements
• Lead client communication on dedicated sessions and present reports
• Participate in ad-hoc scoping calls
• Lead publication efforts
• Participate and lead hiring interviews for IR experts, review home assignments
• Participate in forensic and incident response investigations, including large scale sophisticated attacks,conduct log analysis, host and network-based forensics and malware analysis.
• Participate in threat hunting: proactively hunt for targeted attacks and new emerging threats in client's networks; as well as security assessments and simulations.
• Identify indicators of compromise (IOCs) and tools, tactics, and procedures (TTPs) to help ascertain whether and how breaches have occurred.
• Utilize and develop tools and methodologies to improve Sygnia's existing investigative and hunting technological stack.
• Collaborate with IT and Security teams during investigations.
• Generate and present a comprehensive and professional report of findings from investigations.

Requirements:

• At least 5 years of a relevant experience
• Demonstrates strong analytical and critical-thinking abilities.
• Possesses a proactive approach to problem-solving and investigating complex security incidents
• Demonstrates adaptability, continuous learning and the ability to work collaboratively within multidisciplinary teams.
• Takes ownership of responsibilities and demonstrates commitment to delivering high-quality work.
• Demonstrated in-depth understanding of the life cycle of advanced security threats, attack vectors and variant methods of exploration.
• Deep technical understanding of network fundamentals and common Internet protocols.
• Solid understanding of system and security controls on at least two OSs (Windows, Linux / Unix and MacOS), including host-based forensics and experience with analyzing OS artifacts.
• Fluency with one or more scripting language (i.e. Python).
• Multidisciplinary knowledge and competencies, such as:
• Hands-on experience in data analysis (preferably network traffic or log analysis) in relevant data analysis and data science platforms (Jupyter, Splunk, pandas, SQL).
• Familiarity with cloud infrastructure, web application and servers, android and iOS mobile platforms.
• Experience with malware analysis and reverse engineering.
• Familiarity with enterprise SIEM platforms (e.g. Splunk, QR.adar, ArcSight).
• Excellent communication and interpersonal skills. Fluent English, including the ability to document and explain technical information in a concise, understandable manner.
• Ability to undertake international business travel, approximately 30% of working time, to support client engagements, on-site incident response investigations and other operational requirements

EALicense No.: 08C3209

Registration No.: R1101742