Senior Threat Intelligence & Incident Response Engineer

SPH Media; Singapore; On-site; SGD 150,000 - 210,000; Full time

Job summary

SPH Media in Singapore is seeking a highly technical cybersecurity professional to drive Threat Intelligence, Incident Response, and advanced threat detection. You will own end-to-end security capabilities and work across cloud, on‑prem, and endpoint environments.

This senior role demands hands‑on investigations, threat hunting, and security engineering to continually improve controls and protect critical systems.

Qualifications

• 5–8+ years of hands‑on experience in Incident Response, Threat Hunting, or Threat Intelligence
• Strong experience with EDR platforms such as CrowdStrike (querying, investigation, live response)
• Proven ability to independently investigate and respond to real‑world cyber incidents
• Solid understanding of attacker techniques (lateral movement, persistence, C2, credential abuse)
• Hands‑on experience in cloud security investigations (AWS, Azure, or GCP)
• Scripting skills (Python, PowerShell, or Bash)

Responsibilities

• Actively collect, analyse, and operationalise intelligence from OSINT, dark web, commercial feeds, and ISACs
• Perform hands‑on adversary tracking, campaign analysis, and TTP mapping (MITRE ATT&CK)
• Translate intelligence into detection rules, hunting queries, and actionable use cases
• Integrate intelligence into security tooling, including CrowdStrike, SIEM, and TIP platforms
• Lead and execute end-to-end incident response activities (triage, containment, eradication, recovery)
• Perform hands‑on investigations across endpoints, logs, network traffic, and cloud environments
• Use EDR tools (e.g., CrowdStrike) for live response, forensic analysis, and threat hunting
• Analyse malware behaviour, attacker persistence mechanisms, and lateral movement techniques
• Produce detailed technical reports with clear root cause and remediation actions

Skills

Threat Intelligence

Incident Response

Threat Hunting

Detection Engineering

Cloud Security

Python

PowerShell

EDR

CrowdStrike

Tools

CrowdStrike

SIEM

Sigma

KQL

Splunk

CloudTrail

Job description

SPH Media in Singapore is seeking a highly technical cybersecurity professional to drive Threat Intelligence, Incident Response, and advanced threat detection. You will own end-to-end security capabilities and work across cloud, on‑prem, and endpoint environments.

This senior role demands hands‑on investigations, threat hunting, and security engineering to continually improve controls and protect critical systems.