We are looking for a Cybersecurity Investigation & Incident Response on a 12 month contract basis to start with. This is an extendable contract role as it will be supporting the key long-term projects.
Key Responsibilities:
- Lead technical activities for security use case definition, design, implementation, and enhancement, using frameworks like MITRE ATT&CK.
- Identify ongoing security threats and propose use cases for detection, protection, or mitigation.
- Oversee detection capabilities within the 24/7 regional IT Production SOC.
- Respond to cyber/IT security incidents, evaluating severity and type of security events.
- Develop mitigation plans for recurring security issues and recommend process improvements.
- Collaborate with global, regional, and local teams to ensure efficient detection and response to security events.
- Continuously enhance SOC processes through policy reviews and operational playbooks.
- Partner with APAC Business CSIRT for integrated security monitoring and incident handling.
- Contribute to incident reporting and compliance with regulatory and internal policies.
Key Requirements:
- 7+ years of experience in cybersecurity, with 4+ years specifically focused on security use case design and development.
- Strong experience with security incident investigation, SIEM products, and security monitoring.
- Proficiency in security use case development and coding with JavaScript and scripting languages (e.g., Python, PowerShell, Bash).
- Solid understanding of Linux (RedHat/Ubuntu) and security log analysis.
- Experience working in advanced Security Operation Centers (SOC), including incident investigation and reporting.
- Familiarity with SIEM tools (e.g., ELK stack) and threat modeling.
- Professional credentials in IT security (e.g., SANS, CISSP, OSCP) is a plus.
Competencies:
- Strong problem-solving and troubleshooting skills.
- Ability to work autonomously, manage multiple tasks, and meet deadlines.
Argyll Scott Consulting Pte Ltd
Argyll Scott Asia is acting as an Employment Business in relation to this vacancy.
