VP of Threat Detection & Security Operations

Testing Site - JPMC; Singapore; On-site; SGD 180,000 - 320,000; Full time

Job summary

Testing Site - JPMC is seeking a Security Operations Vice President in Cybersecurity & Tech Controls to lead detection, threat hunting, and SOC operations across a hybrid enterprise. You will design scalable detections and drive a detection-as-code framework aligned with MITRE ATT&CK across endpoints, networks, cloud, and critical business systems.

Collaborating with SOC analysts, threat hunters, red teams, and internal security engineering, you will translate threat research into high-fidelity

Qualifications

• Bachelor’s Degree in Computer Science, Cybersecurity, Data Science, or related disciplines.
• 5+ years of experience in cybersecurity with a core focus on threat detection, security engineering, or SOC operations.
• Expertise in SIEM platforms (e.g., Splunk SPL, KQL, Elastic) with strong query optimization, dashboards, and alert logic.
• Advanced understanding of attacker TTPs, malware behaviors, lateral movement, and financial-sector threats.
• Experience with threat hunting on large enterprise networks, individually and in teams.
• Deep familiarity with telemetry from EDRs, cloud logging, Windows/Linux events, and identity platforms.
• Ability to research TTPs, analyze logs, and develop high fidelity detections.
• Proven collaboration with SOC, IR, threat intel, or red teams in fast-paced environments.
• Strong knowledge of MITRE ATT&CK, Cyber Kill Chain, NIST, SIGMA/YARA formats.
• Proficiency in Python or PowerShell for automation and enrichment.
• Experience with Jupyter Notebooks to automate workflows.

Responsibilities

• Design, implement, and refine advanced threat detection rules in SIEM, EDR, and cloud platforms.
• Refine detection strategies based on evolving TTPs, threat intel, and red team feedback.
• Use detection-as-code pipelines with versioning, QA, and testing workflows.
• Perform threat model reviews, architecture reviews, and detection gap assessments.
• Operationalize MITRE ATT&CK mappings and adversary simulation results for detection logic.
• Map detection coverage to evolving threat landscapes and internal threat profiles.
• Collaborate with Threat Intelligence, Red Team, and IR teams to close feedback loops.
• Evaluate new telemetry sources and onboard log sources for high-fidelity data.
• Mentor junior analysts and engineers in detection logic and telemetry analysis.
• Stay current with industry trends, threats, and regulatory requirements.

Skills

Python

PowerShell

Threat detection

Threat hunting

MITRE ATT&CK

Security operations

SIEM expertise

Education

Bachelor's Degree in Computer Science or related

Tools

Splunk SPL

KQL

Elastic

Jupyter Notebooks

Cloud logging (AWS/Azure/GCP)

Job description

Testing Site - JPMC is seeking a Security Operations Vice President in Cybersecurity & Tech Controls to lead detection, threat hunting, and SOC operations across a hybrid enterprise. You will design scalable detections and drive a detection-as-code framework aligned with MITRE ATT&CK across endpoints, networks, cloud, and critical business systems.

Collaborating with SOC analysts, threat hunters, red teams, and internal security engineering, you will translate threat research into high-fidelity