Cyber Defense Center, Lead Analyst, AVP
Core
Lead a 24/7 Cyber Security Operations Center (SOC) team in Singapore to detect, triage, analyze, and respond to cyber-attacks across a large enterprise network.
Role type
Senior IC Lead Cyber Security Operations Center (SOC) Analyst
Builds
Incident response playbooks, postmortem reports, and enhanced detection capabilities for the Fusion Center
Domain
Financial Services Cyber Security
Required skills
Incident response leadership, malware analysis, memory forensics, adversarial TTPs, SIEM/EDR management, IT architecture knowledge, security operations administration, incident reporting, team mentorship
Preferred skills
Financial services experience, Python/PowerShell/SQL scripting
Technologies
SIEM, EDR/EPP, AV, ID/PS, HIPS, Web Proxy, AD, PKI, DNS, Windows, Linux, Mac
Responsibilities
Lead cyber incident response for high severity incidents, author incident status updates and closure reports, produce postmortem reports, maintain incident response plans and playbooks, manage cyber exercises (tabletops/ranges), measure IR process effectiveness via KRI/KPI, train and mentor SOC personnel
Seniority
Senior, hands-on IC with leadership responsibilities