Sopra Steria is a listed European technology leader specializing in Consulting, Digital Services, and Software. With over 51,000 employees worldwide across Europe, North America and Asia, the Group supports organizations in driving their digital transformation and delivering sustainable business value.
In Asia Pacific, Singapore serves as the regional headquarter for Sopra Steria’s Infrastructure, Cloud and Cybersecurity services.
Join a major international banking client and contribute to strengthening cybersecurity resilience in a global and fast-evolving environment, where digital transformation is at the heart of business stakes.
You join a cybersecurity team dedicated to IT Production Security Investigation & Incident Response, supporting a key banking client in Singapore. You work in an international environment and contribute to strengthening SOC detection capabilities and managing cyber incidents across the APAC region.
You:
- Lead the definition, design and implementation of security use cases based on real-world attack scenarios and frameworks such as MITRE ATT&CK,
- Identify emerging cyber threats and propose detection and mitigation strategies,
- Conduct threat hunting activities and enhance detection capabilities of a 24/7 SOC,
- Respond to security incidents and evaluate their impact and severity,
- Investigate incidents, coordinate remediation actions and ensure follow-up until closure,
- Identify recurring issues and contribute to the continuous improvement of SOC processes and playbooks,
- Collaborate with global, regional and local stakeholders to ensure operational readiness and efficiency,
- Contribute to compliance with internal policies and regulatory requirements,
- Support reporting activities and participate in audit processes.
You have at least 5 years of experience in cybersecurity incident response, with strong expertise in detection engineering or security use case development.
You:
- Demonstrate solid experience in incident response, threat hunting and security event analysis
- Master SIEM solutions and security incident management processes
- Use ELK (Elastic, Logstash, Kibana) or similar tools
- Work effectively in Linux environments (RedHat, Ubuntu)
- Use scripting or programming languages (Python, PowerShell, Bash, SQL is a plus)
- Interpret security logs and translate them into detection use cases
- Demonstrate strong analytical and problem-solving skills
- You are fluent in English; French is a strong advantage.
- You act proactively, work autonomously and interact effectively in complex international environments with multiple stakeholders.
•Work-life balance: Hybrid working mode and Work-from-Abroad benefits, 18 days of Annual leave
•Health & insurance: Comprehensive coverage including General Practitioner, hospitalization, dental, and optical
•Performance incentives: Annual bonus based on individual performance
•Learning & development: Training programs, certification opportunities, and training incentives to support career growth
•Team culture: Regular team-building activities and social events
