Information Technology jobs in Singapore
Information Technology - Cyber Security Engineer (Threat Management and Incident Response) (Scoot)
SINGAPORE AIRLINES LIMITED
IT Operations Manager - DRS/WOG Migrations & Knowledge Mgmt
WORKFORCE SINGAPORE AGENCY
Manager/Senior Manager, IT Operations (Temp) [DTD]
WORKFORCE SINGAPORE AGENCY
Discover more opportunities than anywhere else. Find more jobs now
Connect with headhunters to apply for similar jobsJunior Presales Engineer (Enterprise Network & Systems)
ACCLIVIS TECHNOLOGIES AND SOLUTIONS PTE. LTD.
Vulnerability Analyst (Burpsuite / Metaspoilt)
Quess Corp
Assistant Manager, Compensation (HR)
MCI Career Services
Senior VP, Cybersecurity Audit - Group Audit Leader
DBS
JAPANESE Proficiency - IT System Development Project Manager & Delivery Lead
DENTSU SOKEN SINGAPORE PTE. LTD.
SAP Successfactor Project Manager
BLUE OCEAN SYSTEMS INFOTECH PTE. LTD.
VP/SVP, Programme Manager, Data Strategy Group
GIC Private Limited
Cyber Security Engineer (Threat Management and Incident Response)
Job summary
A leading airline company in Singapore is seeking a Cybersecurity Incident Response professional to manage security operations and respond to incidents across corporate networks. The ideal candidate has at least 5-6 years of experience in cybersecurity, specializing in threat detection and incident response. They will utilize tools and techniques to enhance security protocols and present findings to both technical and non-technical audiences. Certifications such as CISSP or CISM are preferable.
Qualifications
- At least 5-6 years of experience in Cybersecurity Incident and Security Operations.
- Demonstrate experience in Information Security with a focus on Cyber Security Operations.
- Excellent knowledge of computer networks and common protocols.
Responsibilities
- Perform security monitoring and incident response activities.
- Manage Security Operations Center and detect incidents.
- Document incident response analysis activities thoroughly.
Skills
Education
Tools
You will be a member of the Group Information Security Team responsible for responding to threats and incidents to the corporate networks, systems (on-prem and cloud), and digital assets.
- Perform security monitoring and incident response activities across the scoot networks, leveraging a variety of tools and techniques.
- Manage Security Operations center.
- Detect incidents through proactive “hunting” across security-relevant data sets.
- Ability to correlate multiple events from different devices to identify abnormal behaviour
- Document incident response analysis activities thoroughly
- Develop new, repeatable methods for finding malicious activities
- Provide recommendations to enhance detection and protection capabilities.
- Effectively present technical topics to both technical and non-technical audiences
- Develop and follow detailed operational processes and procedures to appropriately analyze, escalate, and assist in the remediation of information security incidents
- Prioritize multiple high-priority tasks and formulate responses/recommendations in a fast-paced environment
- Prepare documentation for security technical standards, standard operational procedures, and hardening standards.
- Analyse endpoint, network, and application logs
- Assist other IT teams in security-related issues
- Engage with vendors and parent company SIA team members for security reviews.
- Degree in Computer Engineering, Computer Science, Information Systems, or equivalent qualification.
- At least 5-6 years of experience in Cybersecurity Incident and Security Operations.
- Demonstrate experience in Information Security with a focus on Cyber Security Operations, Incident Response and Detection.
- Experience working in the Security Operations Centre and/or Computer Incident Response Team.
- Excellent problem-solving skills combined with hands-on experience doing root cause analysis and post-incident reviews.
- Solid knowledge of computer networks and common protocols
- Knowledge of prominent cyber threat actors and APT groups.
- Experience with Threat Intelligence Platforms.
- Experience with SIEM (especially Splunk).
- Professional security related qualifications (i.e. GCIA, CISSP etc) will be an advantage
- Preferred certifications: CISSP, CISM, CISA, ISMS, TOGAF, SABS
- Good interpersonal skills
* The salary benchmark is based on the target salaries of market leaders in their relevant sectors. It is intended to serve as a guide to help Premium Members assess open positions and to help in salary negotiations. The salary benchmark is not provided directly by the company, which could be significantly higher or lower.