Vice President, Threat Detection Engineer

Overview

SGX is recruiting a Vice President or Senior Vice President to lead and advance its cybersecurity threat detection capabilities. This role demands design, development, tuning, and maintenance of sophisticated threat detection systems spanning the organization's entire technology landscape. The primary goal is to identify malicious activities quickly, improve detection accuracy while reducing false alarms, and expedite incident response by leveraging advanced analytics, detection rules, and threat hunting.

Key Responsibilities

• Create and maintain security detection rules and use cases across platforms including SIEM, EDR, NDR, and cloud security.
• Develop detection logic rooted in known adversary tactics, techniques, and procedures (TTPs).
• Build behavioral analytics models and anomaly detection techniques, aligning with MITRE ATT&CK and MITRE ATLAS frameworks.
• Continuously optimize detection rules to enhance precision and minimize false positives.
• Keep abreast of emerging threat trends, vulnerabilities, and translate threat intelligence into actionable detection content.
• Assess current detection coverage to identify gaps and recommend enhancements.
• Partner with threat hunters to discover unknown threats and convert these findings into permanent detection mechanisms.
• Implement improved event correlation and alerting strategies.
• Develop and automate detection workflows utilizing SOAR platforms, integrating detection content across security controls, and automating tasks like triage and response.
• Conduct adversary emulation, purple-team exercises, attack simulations to validate and measure detection effectiveness.
• Integrate security tools with other systems (e.g., SIEM, ticketing, CMDB, SOAR) to increase automation and operational efficiency.
• Lead process and documentation improvements within platform operations and escalation workflows.
• Collaborate with Engineering, Infrastructure, Cloud, and SOC teams to deploy detection logic effectively.
• Engage with internal stakeholders to ensure tool outputs support detection use cases, incident response, audits, and compliance.
• Demonstrate a strong sense of urgency, accountability, innovation mindset, and commitment to sustainable solutions that improve controls and risk mitigation.
• Maintain discipline in timely submission of key metrics and reports.

Candidate Requirements

• A minimum of 10-15 years in relevant roles, preferably within financial services or asset management, including at least 5 years working directly with cybersecurity platforms.
• Deep familiarity with information security policies and principles.
• Knowledge of Monetary Authority of Singapore (MAS) technology regulations such as Technology Risk Management Guidelines, Cyber Hygiene, and Outsourcing guidelines.
• Strong expertise with security technologies including but not limited to EDR, SIEM, SOAR, XDR, email security, vulnerability management, and cloud security.
• Experience fine-tuning detection rules, configuring security tool integrations, and enhancing processes.
• Adaptability to diverse environments and cultures with ability to thrive in demanding, fast-paced conditions.
• Self-driven, thorough, adaptable, analytical, and curious mindset.
• Excellent communication and presentation skills capable of engaging diverse audiences.

Preferred Qualifications

• Professional certifications such as CISSP, CISM, GIAC GCIA/GSEC, Microsoft Security certifications, or equivalents.
• Experience with endpoint and cloud security, advanced detection technologies, analytics, query languages, operating systems, and recognized security frameworks like MITRE ATT&CK and NIST.