Senior Specialist, Security Operations (Senior Executive)

SBS Transit Ltd; Singapore; On-site; SGD 90,000 - 150,000; Full time

Job summary

SBS Transit Ltd is seeking an experienced cybersecurity professional in Singapore to manage tickets, triage incidents, and oversee vulnerability management, policy compliance, and web application security. You will identify threats, analyze logs from multiple sources, and support EDR/MDR/XDR platforms.

The role requires strong IT security expertise across email security, vulnerability assessment, and network security, with forensics and incident management knowledge.

Qualifications

• Degree in Computer Engineering or equivalent.
• Trained in Cybersecurity, Information Security, Forensics or equivalent
• At least 5 years of cybersecurity work

Responsibilities

• Responsible for all cyber security tickets raised and the triage process.
• Plan, deploy and operate the vulnerability management, policy compliance and web application security functions.
• Identify cyber security threats to systems and detect security anomalous activities and perform analysis of security logs from multiple sources.
• Manage Endpoint Detection Response (EDR) technologies and to be part of MDR/XDR platform support.
• Possess working knowledge in handling phishing attacks and containment steps.
• Demonstrate strong IT background with expert level knowledge of multiple security practices (Email security solutions, vulnerability management, network security (firewall, IPS/IDS, SIEM, threat intelligence, etc.) in addition to forensics and incident management.
• Provide advisory and solutions for new security threats and vulnerabilities.
• Possess basic to moderate experience in Threat detection, Penetration testing and red teaming.
• Perform security analysis to Cloud platform such as AWS, Azure as well M365 services.

Skills

Threat detection

Penetration testing

Red teaming

EDR/MDR/XDR

Cloud security

Incident management

Security governance

Forensics

Network security

Phishing containment

Education

Bachelor's degree in Computer Engineering

Cybersecurity training/Forensics

Tools

SIEM

EDR

Firewalls

NIDS/NIPS

Threat intelligence

Forensics tools

Job description

• Responsible for all cyber security tickets raised and the triage process.


• Plan, deploy and operate the vulnerability management, policy compliance and web application security functions.


• Identify cyber security threats to systems and detect security anomalous activities and perform analysis of security logs from multiple sources.


• Manage Endpoint Detection Response (EDR) technologies and to be part of MDR/XDR platform support.


• Possess working knowledge in handling phishing attacks and containment steps.


• Demonstrate strong IT background with expert level knowledge of multiple security practices (Email security solutions, vulnerability management, network security (firewall, IPS/IDS, SIEM, threat intelligence, etc.) in addition to forensics and incident management.


• Provide advisory and solutions for new security threats and vulnerabilities.


• Possess basic to moderate experience in Threat detection, Penetration testing and red teaming.


• Perform security analysis to Cloud platform such as AWS, Azure as well M365 services.

Requirements

• Degree in Computer Engineering or equivalent.


• Trained in Cybersecurity, Information Security, Forensics or equivalent


• At least 5 years of cybersecurity work

Technical Skills

• CISSP/CISM/CISA/CEH/ CRISC or equivalent certification


• Strong domain knowledge of information security governance and risk management, controls, vulnerability assessment/penetration testing, compliance, business continuity, investigations, system architecture and design, legal, and industry IT/OT and cyber security best-practices.


• Knowledge on ISO27001 and IEC62443, NIST Cybersecurity Framework, CSA Code of Practice (CCoP).


• Experience in Threat detection, Penetration testing and red/purple teaming.


• Knowledge in Network, Web Security and Application Security would be highly valued.


• Experience with information security tools (SIEM, anti-virus tools etc.).


• Experience in forensics and incident management.

Non-Technical Skills/Attributes

• Ability to work under pressure


• Self-motivated, a good team player and strong ability to multi-task


• Excellent verbal, written communication, presentation and analytical skills