SOC & Incident Response Lead

About the Role

Our client, a prominent large enterprise in Singapore, is searching for a proactive Security Operations (SecOps) leader to take full ownership of the organization's defense mechanisms. The essential mission is straightforward: safeguard the enterprise by leading a team dedicated to detecting and halting cyber attackers.

Key Responsibilities

• Manage the Security Operations Center (SOC), including both internal staff and external service providers.
• Act as the incident commander during cybersecurity incidents and breaches.
• Enhance detection capabilities to be more efficient, quicker, and smarter by minimizing false positives and maximizing actionable intelligence.
• Integrate threat intelligence feeds into effective and operational detection methods.
• Provide clear and comprehensive reporting to support the Chief Information Security Officer (CISO).

Required Experience and Skills

• Minimum of three years experience leading SOC, SecOps, or Incident Response teams.
• Over seven years of professional experience in cybersecurity.
• Hands-on experience using key security technologies such as Splunk, Microsoft Sentinel, CrowdStrike, and SOAR platforms.
• Proficient in threat hunting, with the ability to map findings to the MITRE ATT&CK framework.
• Experience working with cloud platforms (AWS, Azure) as well as on-premises environments.
• Competency in querying languages like KQL and SPL, alongside scripting abilities in Python and PowerShell.
• Professional certifications such as CISSP, CISM, or GCIH are advantageous but not mandatory.