About the job
Role Overview:
We are seeking a seasoned leader to own security operations outcomes and drive our observability strategy, ensuring services are detectable, diagnosable, and defensible. This role leads the Security Operations Center (SOC) and incident response end-to-end, while building a full-stack observability capability across applications, platforms, and infrastructure. A secondary focus may include shaping observability into a customer-facing service offering.
How you'll contribute to MyRepublic's success:
Security Operations Leadership:
- Own the SOC operating model, ensuring effective, consistent, and continuously improving monitoring and response.
- Define triage and escalation processes, build playbooks, and establish coverage/on-call models.
- Drive SOC KPIs including detection quality, response speed, and disciplined case closure.
Incident Response & Major Incident Management:
- Lead incident response across security and production events.
- Strengthen command-and-control, postmortem rigor, and corrective/preventative action tracking to reduce repeat incidents and improve service continuity.
Observability Strategy & Platform Ownership:
- Define and execute the observability roadmap across logs, metrics, traces, dashboards, and service health indicators.
- Own platform architecture, telemetry standards, retention policies, access controls, and reliability.
Full-Stack Visibility:
- Ensure services are operable by design with consistent dashboards, alerting, SLOs, and runbooks.
- Improve detection and diagnosis across applications, middleware, databases, Kubernetes/container platforms, and infrastructure.
Detection Engineering:
- Develop and maintain security detections and correlated alerting.
- Tune and enrich signals to reduce noise, ensuring detections map to real risks with practical, repeatable response actions.
Automation & Efficiency:
- Introduce automation for alert routing, enrichment, ticketing, guided workflows, and reporting.
- Drive operational efficiency while maintaining auditability and response quality.
Governance, Risk & Compliance:
- Ensure operations and telemetry practices align with internal controls and external compliance obligations.
- Maintain audit-ready evidence trails for incidents, log access, and telemetry pipelines.
Commercialization Support (Secondary):
- Contribute to defining observability as a scalable, customer-facing capability.
- Support productization through technical design, service definition, and reliability requirements.
We think you'll fit in great with us if you:
- Proven experience leading security operations and incident response in a complex environment, including building SOC processes, escalation models, and playbooks.
- Strong expertise in observability practices across logs, metrics, traces, alerting, and SLO-driven operations, with experience applying these to both applications and infrastructure.
- Hands-on with common monitoring and security tooling ecosystems such as SIEM patterns, log analytics, and cloud-native monitoring, with the ability to integrate across platforms.
- Experience driving operational improvements via automation and standardization, with comfort collaborating across Engineering, Ops, and Service Management.
- Strong working knowledge of detection workflows, including alert triage, investigation, containment, eradication, and recovery, plus post-incident review discipline.
- Hands-on proficiency with SIEM and security monitoring concepts, with tooling examples such as Microsoft Sentinel, Splunk ES, IBM QRadar, Elastic Security, or Google Chronicle,
- Hands-on proficiency with observability platforms for logs, metrics, and traces, with tooling examples such as Prometheus and Alertmanager, Grafana, Loki, OpenTelemetry, Tempo.
- Practical experience with cloud and platform monitoring and integrations, with examples such as AWS CloudWatch, CloudTrail, GuardDuty, Security Hub, and GCP Cloud Operations suite, including Cloud Logging, Cloud Monitoring, and audit logging patterns.
- Strong understanding of Kubernetes and container observability/security concepts, with examples such as EKS or GKE, cluster logging/metrics patterns.
- Proficiency in automation and infrastructure tooling used to operationalize observability and security controls, with examples such as Terraform, Ansible, CI/CD pipelines like GitHub Actions, GitLab CI, Jenkins, and scripting in Python or Bash.
- Working knowledge of networking fundamentals relevant to incident response and monitoring, including DNS, TLS, load balancing, firewalling, and common telemetry sources like WAF logs and IDS/IPS events.
Why Join Us
At MyRepublic, we believe in creating a workplace that values your well-being, growth, and happiness - both in and out of work. Here's what you can look forward to when you join our team:
- Wellness Day - Enjoy 1 wellness day every quarter to rest, recharge, or do something that makes you feel great.
- Industry Leading Family Care Benefits- Time off to care for your loved ones when they need you most.
- Birthday Leave - Celebrate you! Take a day off on your special day.
- Work From Anywhere (WFA) Leave - Up to 20 days a year to work from wherever inspires you.
- Hybrid Work Arrangement - Enjoy flexibility with a mix of office collaboration and remote work.
- Plenty of Fun Events! - From team bonding activities to festive celebrations, there's always something happening to keep the energy high and connections strong.
From being the first to launch 1Gbps broadband plans and the first network optimised broadband service for gaming in Singapore, to crafting workplace practices that put wellbeing at its core, our values guide us in everything we do at MyRepublic. It's the secret sauce that makes us tick. If you espouse the following, we know you would fit in great with us!
