Senior Threat Hunter & Incident Response Engineer

NEWBRIDGE ALLIANCE PTE. LTD.; Singapore; On-site; SGD 120,000 - 180,000; Full time

Job summary

NEWBRIDGE ALLIANCE PTE. LTD. seeks a senior, hands-on defender who will own the detection and response stack, hunt attackers, investigate incidents, and drive improvements.

This role emphasizes technical ownership over management, with a focus on building mature security capabilities and keeping them sharp. You will be the technical authority responsible for end-to-end incident response, from tool selection and deployment to tuning, integration, and decommissioning, including proactive hunting

Qualifications

• 5 to 8 years minimum doing IR, Threat Hunting, or Cyber Threat Intelligence.
• Deep, hands-on experience with modern EDR (CrowdStrike preferred).
• Has handled real incidents solo, not just as part of a queue.
• Can write detections - KQL / SPL / Sigma or similar.
• Understands attacker techniques - persistence, movement, credential theft, C2.
• Experience in cloud threats beyond on-premise.
• Can script solutions - Python, PowerShell, or Bash.

Responsibilities

• Own the full lifecycle of detection and response tools and processes.
• Act as the technical authority for the detection and response stack.
• Lead end-to-end incident investigations and containment.
• Hunt for attacker behaviors before alerts fire across endpoints, identities, and cloud.
• Secure and defend cloud environments (AWS/Azure/GCP) and fix root causes.
• Defeat phishing, fake domains, and impersonation affecting the brand.
• Harden controls and automate response playbooks to accelerate the team.

Skills

5-8 years exp IR/Threat Hunting/CTI

EDR experience (CrowdStrike)

Incidents handled solo

Detections in KQL/SPL/Sigma

Cloud security understanding

Scripting (Python/PowerShell/Bash)

Tools

CrowdStrike EDR

Job description

NEWBRIDGE ALLIANCE PTE. LTD. seeks a senior, hands-on defender who will own the detection and response stack, hunt attackers, investigate incidents, and drive improvements.

This role emphasizes technical ownership over management, with a focus on building mature security capabilities and keeping them sharp. You will be the technical authority responsible for end-to-end incident response, from tool selection and deployment to tuning, integration, and decommissioning, including proactive hunting