Leads cybersecurity detection and response activities across APAC, including security use-case design, threat hunting, incident investigation, mitigation, and SOC capability improvement. Develops detection content using attack frameworks, interprets security logs, oversees regional SOC operations, supports incident reporting and compliance, and partners with global stakeholders. Requires strong SIEM, incident response, automation, scripting, Linux, and security engineering experience.
Company Description
Sopra Steria is a listed European technology leader specializing in Consulting, Digital Services, and Software. With over 51,000 employees worldwide across Europe, North America and Asia, the Group supports organizations in driving their digital transformation and delivering sustainable business value.
In Asia Pacific, Singapore serves as the regional headquarter for Sopra Steria’s Infrastructure, Cloud and Cybersecurity services.
- Lead technical activities (security usecase definition, design, implementation & enrichment) in the team of IT Production Security Investigation & Incident Response based on real-world attack scenarios and framework like MITRE ATT&CK, ensuring robust security detection posture across various layers.
- Understand ongoing security threats in the wild and propose security usecase to detect and when possible, protect or mitigate.
- Be autonomous on technical activities (definition, R&D/threat hunting) in the team of IT Production Security Investigation & Incident Response and oversee the detection capabilities of the 24/7 regional IT Production SOC
- Respond to Cyber / IT security incidents and evaluates the type and severity of security events.
- Identify recurring security issues and risks and develops mitigation plans and recommends process improvements.
- Partner with global, regional and local stakeholders to ensure organizational and procedural efficiency and readiness for detection of suspicious events and reaction
- Continuously improve the processes to strengthen the current SOC framework via review of policies and operational playbooks
Contributing Responsibilities:
- Partner with the APAC Business CSIRT for integrated security monitoring and alert/incident handling operations.
- Contribute to local security incident response outside the direct scope of responsibilities (i.e.,local IT production in some APAC business entities)
- Contribute to the Bank compliance with regulatory requirements and internal policies
- Contribute to the reporting of all incidents according to the Incident Management System
- Contribute to the control frameworks in day‐to‐day business activities, such as Control Plan;
- Participate to Audit interview and provide the require evidence
Technical Requirements:
- Requires a minimum of 7 or more years of experience as security professional
- Experience in security usecase design/development with understanding of Java language.
- Good working knowledge of Linux (RedHat/Ubuntu).
- Working knowledge to interpret security logs or instructions into threat models. SecOPS-DevOPS mindset & skills.
- Experience and knowledge in investigating incidents, remediation, tracking and follow-up for incident closure with concerned teams, stakeholders.
- Thorough understanding of technologies and security concepts, with knowledge & hands on experience in SIEM Product and Security Incident Management
- Experience on incident response activities (threat hunting, event analysis, incident investigation, reporting)
- Comfortable working with and making the most of large data sets (collection, analysis, response), creating content/use cases/models and bringing an automation mindset.
Personal Attributes
- Strong problem-solving skills
- Good communication skills (English is MUST, French is added advantage)
- Positive attitude, willing to upskill and carry out in-depth troubleshooting
- Has the ability to work autonomously and think on feet, be-proactive.
- Good interpersonal skills and team player
- High energy level coupled with a desire to take on responsibility
- Able to multi-task & deliver within agreed deadlines.
Qualifications:
- Candidate MUST have 7 or more years of experience on overall cybersecurity incident response with 4+ years specifically on security usecase design, development, coding.
- Experience in SIEM on ELK(Elastic Logstash Kibana) stack is a plus
- Professional credentials in one of the relevant IT Security disciplines is a plus (SANS / CISSP / OSCP)
- Experience in common scripting languages such as Python, PowerShell, Bash, SQL is a plus
•Work-life balance: Hybrid working mode and Work-from-Abroad benefits, 18 days of Annual leave
•Health & insurance: Comprehensive coverage including General Practitioner, hospitalization, dental, and optical
•Performance incentives: Annual bonus based on individual performance
•Learning & development: Training programs, certification opportunities, and training incentives to support career growth
•Team culture: Regular team-building activities and social events
Similar Jobs
Artificial Intelligence • Fintech • Payments • Business Intelligence • Financial Services • Generative AI
Lead a full-stack engineering team building scalable websites, CMS platforms, customer-facing applications, and growth infrastructure. Set technical direction across frontend, backend, APIs, content platforms, and integrations while enabling experimentation, personalization, SEO, performance, and conversion optimization. Mentor engineers, drive engineering excellence, and partner with Product, Design, Marketing, and Data Science to deliver measurable customer acquisition and growth outcomes.
Top Skills:
A/B TestingAPIsCachingCdnCmsEdge InfrastructureJavaKotlinLlmMachine LearningMarketing AutomationNext.JsNode.jsObservabilityPersonalizationPythonReactSeoServer-Side RenderingStatic Site GenerationTypescriptWeb Analytics
An Hour Ago
Financial Services
Leads complex digital forensics and incident response investigations, including host and network forensics, malware analysis, log analysis, root cause analysis, threat hunting, and investigation reporting. Partners with Legal, HR, Compliance, Cybersecurity, and Global Security on internal and post-incident investigations. Develops investigative methodologies, training, and AI-assisted forensic workflows while ensuring evidence integrity, auditability, and defensible outcomes.
Top Skills:
Ai-Assisted Investigative WorkflowsBashCellebriteEncaseHost-Based ForensicsMalware Reverse EngineeringNetwork ForensicsPerlPythonRekallRubySiftVolatilityWiresharkX-Ways
Financial Services
Supports Client Onboarding and Service senior leadership through executive communications, presentations, data reporting, business performance analysis, strategic planning, and initiative coordination. The role develops actionable business insights, tracks execution, identifies dependencies and risks, drives efficiencies, and collaborates across functions. It also manages a team of business management analysts and supports finance, budgeting, organizational strategy, and executive-level communications.
Top Skills:
ExcelMicrosoft TeamsPowerPointSharepoint
What you need to know about the Singapore Tech Scene
The digital revolution has driven a constant demand for tech professionals across industries like software development, data analytics and cybersecurity. In Singapore, one of the largest cities in Southeast Asia, the demand for tech talent is so high that the government continues to invest millions into programs designed to develop a talent pipeline directly from universities while also scaling efforts in pre-employment training and mid-career upskilling to expand and elevate its workforce.
