Senior Security Incident Responder (Contract)

QUESS SELECTION & SERVICES PTE. LTD.; Singapore; On-site; SGD 120,000 - 180,000; Full time

Job summary

QUESS SELECTION & SERVICES PTE. LTD. is seeking an experienced cybersecurity incident responder in Singapore. The role focuses on monitoring security events, investigating high-severity incidents, and performing advanced threat analysis across SIEM, EDR/XDR, and network security layers.

The ideal candidate will bring 7+ years in incident response with 4+ years in use-case design, strong SIEM skills, and proficiency in scripting. Willingness to support weekend/night shifts is required.

Qualifications

• Bachelors in cybersecurity/IT/computer science or equivalent experience.
• 7+ years in cybersecurity incident response with 4+ years in use-case design/development.
• SIEM with ELK stack experience is a plus.
• Credentials in IT security (e.g., SANS/CISSP/OSCP) are a plus.
• Proficient in Python/PowerShell/Bash/SQL scripting.
• Familiarity with SOC structure and incident response lifecycle.

Responsibilities

• Continuously monitor and analyse security events from SIEM, EDR/XDR, firewalls, IDS/IPS, and more.
• Investigate and respond to security incidents, including high-severity events.
• Analyze logs, network traffic, and endpoints to determine incident root cause.
• Perform containment, eradication, recovery, and remediation actions.
• Conduct threat hunting to identify IOCss and attacker behaviours.
• Develop threat-hunting queries and techniques to identify emerging threats.
• Correlate information from multiple sources to identify attack patterns.
• Analyze malware, URLs, domains, IPs, and other IOCs as required.
• Review threat intelligence to identify emerging threats and techniques.
• Apply MITRE ATT&CK during investigations and threat analysis.
• Develop and tune SIEM rules, dashboards, and alerts.
• Improve detection accuracy and reduce false positives in SOC.
• Identify gaps in monitoring and recommend tool/process improvements.
• Coordinate with IT/network teams for incident containment and remediation.
• Participate in major incident management and provide technical recommendations.
• Conduct post-incident root cause analyses and remediation guidance.
• Prepare detailed incident reports and security documentation.
• Develop incident response playbooks and SOC procedures.
• Mentor SOC members and share knowledge to improve capabilities.
• Participate in SOC meetings, training, and continuous improvement.
• Stay updated on threats, vulnerabilities, and best practices.
• Support rostered weekend/night operations as required.

Skills

Incident response

SIEM

Threat hunting

MITRE ATT&CK

Python/PowerShell

Log analysis

SOC operations

Security tooling

Education

Bachelor's degree in Cybersecurity or related field

Equivalent professional experience

Tools

ELK stack

LogRhythm

Splunk

EDR/XDR tools

Job description

QUESS SELECTION & SERVICES PTE. LTD. is seeking an experienced cybersecurity incident responder in Singapore. The role focuses on monitoring security events, investigating high-severity incidents, and performing advanced threat analysis across SIEM, EDR/XDR, and network security layers.

The ideal candidate will bring 7+ years in incident response with 4+ years in use-case design, strong SIEM skills, and proficiency in scripting. Willingness to support weekend/night shifts is required.