Threat Detection Engineer & Incident Response Lead

Amaris Consulting; Singapore; On-site; SGD 140,000 - 190,000; Full time

Job summary

Amaris Consulting in Singapore is seeking an experienced Detection Engineer & Incident Responder to join our Cybersecurity practice. You will design and build detection logic, hunt threats, and lead investigations for a 24/7 SOC.

This hands-on role blends defender mindset with builder skills, focusing on use-case development and incident response. The candidate will contribute to threat detection content, incident management, and cross-functional collaboration across regional teams, with a

Qualifications

• 7+ years of cybersecurity experience including incident response and SOC work.
• 4+ years in security use case design and detection content coding.
• Hands-on experience with a SIEM platform and detection development.
• Strong knowledge of MITRE ATT&CK and threat actor techniques.
• Proficient Linux knowledge (RedHat/Ubuntu) and core security concepts.

Responsibilities

• Lead the definition, design, implementation, and continuous enrichment of security use cases, mapped to the MITRE ATT&CK framework.
• Research emerging threats and translate them into new detection logic to detect, protect, or mitigate.
• Tune and refine existing detection content to reduce false positives and improve fidelity.
• Respond to cybersecurity incidents, assessing type, severity, and impact.
• Lead investigations from triage through root cause analysis, containment, and remediation.
• Conduct proactive threat hunting using IOC and TTP analysis.
• Track incidents through to closure, coordinating with technical stakeholders.

Skills

Incident response

Threat hunting

Security operations

MITRE ATT&CK

Java

Education

Bachelor's degree in Cybersecurity, Computer Science, Information Technology, Engineering, or related field

Tools

Elastic/ELK

Splunk

QRadar

Sentinel

ArcSight

Job description

Amaris Consulting in Singapore is seeking an experienced Detection Engineer & Incident Responder to join our Cybersecurity practice. You will design and build detection logic, hunt threats, and lead investigations for a 24/7 SOC.

This hands-on role blends defender mindset with builder skills, focusing on use-case development and incident response. The candidate will contribute to threat detection content, incident management, and cross-functional collaboration across regional teams, with a