Senior Incident Response Lead — Cyber Defense Ops

GovTech Singapore; Singapore; On-site; SGD 120,000 - 180,000; Full time

Job summary

GovTech Singapore is hiring a Cybersecurity Operations Specialist (Incident Response) to lead the CDOI team in managing cybersecurity incidents across the lifecycle. You will triage events, conduct investigations, and guide containment and recovery strategies.

The role requires a Bachelor’s in CS/Info Sec, relevant certifications, and 5+ years in incident response or digital forensics. Proficiency with Splunk/ELK and forensic tools is expected, with cloud awareness and strong communication

Qualifications

• Bachelor’s Degree in Computer Science/Information Security or equivalent.
• Certifications (GCFA, GREM, GNFA, GCTI, CISSP or equivalent) preferred.
• 5+ years as an incident responder/digital forensics/malware analysis preferred.
• Good knowledge of Windows and Linux OS, plus networking basics.
• Strong log analysis skills across multiple sources (Splunk/ELK/Google SecOps).
• Proficient with forensic tools AXIOM/FTK/Autopsy.
• Cloud and container technologies are a plus.
• Good communication, teamwork, and a strong sense of integrity.

Responsibilities

• Lead incident response activities through all phases of an incident.
• Triage and investigate potential cybersecurity incidents to determine scope and severity.
• Develop and execute containment strategies.
• Perform root cause analysis to identify attack vectors, tactics, and impact.
• Conduct security event log analysis across endpoints, networks, apps, and cloud.
• Perform digital forensic acquisition and analysis from endpoints, servers, networks, cloud, and mobile devices.
• Maintain stakeholder communication and prepare post-incident reports with preventive recommendations.
• Provide input for automating Security Operations (SOAR playbooks).
• Develop and test incident response playbooks and processes.
• Maintain situational awareness of cyber threat landscape and TTPs.

Skills

Incident response

Log analysis

Digital forensics

Malware analysis

Communication

Attention to detail

Education

Bachelor's Degree in Computer Science/Information Security

Tools

Splunk

ELK Stack

Google SecOps

AXIOM

FTK

Autopsy

Job description

GovTech Singapore is hiring a Cybersecurity Operations Specialist (Incident Response) to lead the CDOI team in managing cybersecurity incidents across the lifecycle. You will triage events, conduct investigations, and guide containment and recovery strategies.

The role requires a Bachelor’s in CS/Info Sec, relevant certifications, and 5+ years in incident response or digital forensics. Proficiency with Splunk/ELK and forensic tools is expected, with cloud awareness and strong communication