SOC & Incident Response Lead

Client: Large Enterprise | Location: Singapore

We are looking for a hands-on SecOps leader who wants to OWN the defence function.

The job is simple: Protect the enterprise. Lead the team that finds and stops attackers.

You will:

• Run the SOC - internal people + external provider
• Be the incident commander when things go wrong
• Make detection better, faster, smarter - less noise, more signal
• Bring threat intel into real, working detections
• Make the CISO look good with clear reporting

You have:

• Led a SOC / SecOps / IR team before - 3+ years
• Been in security for 7+ years
• Actually used Splunk / Sentinel / CrowdStrike / SOAR - not just seen it
• Hunted threats and mapped them to ATT&CK yourself
• Worked across AWS / Azure / on-prem
• Can query (KQL/SPL) and script (Python/PowerShell)
• CISSP/CISM/GCIH etc helps but not mandatory