Sign up with

Already have an account? Log in here

Need some help?
Talk to us at +91 7670800001

Lead, Cyber Security Incident Response at Cygnify

Singapore, , Singapore -

Full Time

Start Date

Immediate

Expiry Date

17 Apr, 26

Salary

0.0

Posted On

17 Jan, 26

Experience

5 year(s) or above

Remote Job

Yes

Telecommute

Yes

Sponsor Visa

Skills

Cyber Security, Incident Response, Threat Hunting, Log Analysis, Forensic Investigations, SIEM, Malware Analysis, Network Security, Cloud Security, Scripting, MITRE ATT&CK, Data Breaches, Insider Threats, Elastic, AWS, Azure

Industry

Business Consulting and Services

Description

Role: Lead, Cyber Security Incident Response Location: Singapore We are partnering with a leading telecom client to hire a Cybersecurity Incident Response SME to lead end-to-end incident detection, investigation, and response across enterprise environments. Responsibilities: Own the full cybersecurity incident lifecycle: monitoring, triage, investigation, containment, and closure Lead response to malware, data breaches, insider threats, and cloud security incidents Perform threat hunting, log analysis, and forensic investigations Build, tune, and manage SIEM detections (Elastic / ELK preferred) Improve MTTD/MTTR through continuous alert tuning and use-case development Collaborate with SOC, CSIRT, IT, Cloud, and external MSSP teams Present incident reports, root cause analysis, and remediation plans to stakeholders 5–8 years of experience in SOC / Incident Response / Detection Engineering Strong hands-on experience with SIEM (Elastic preferred; Splunk acceptable) Expertise in incident response, threat hunting, and log correlation Solid knowledge of MITRE ATT&CK, malware analysis, and network security Exposure to cloud security (AWS / Azure / GCP) Scripting skills (Python / Bash / PowerShell) are a plus Relevant certifications (CISSP, GCIH, GCIA, CEH, Elastic) preferred

Responsibilities

The role involves owning the full cybersecurity incident lifecycle, including monitoring, triage, investigation, containment, and closure. The candidate will lead responses to various security incidents and collaborate with multiple teams.