Cyber Security Incident Responder – APAC

About the role

We are looking for a Cyber Security Incident Responder to join the Production SOC & Security Investigation & Incident Response team of a global bank in Singapore. The role focuses on strengthening detection capabilities across APAC, contributing to global use‑case development, and enhancing SIEM and SOAR platforms.

Key responsibilities

• Lead technical activities for security use‑case definition, design, implementation and enrichment based on real‑world attack scenarios and frameworks such as MITRE ATT&CK.
• Enhance SIEM and SOAR capabilities and oversee 24/7 regional IT Production SOC detection functions.
• Respond to cyber and IT security incidents, assess severity, and drive remediation actions.
• Identify recurring security issues, develop mitigation plans and recommend process improvements.
• Collaborate with global, regional and local stakeholders, including the APAC Business CSIRT, to ensure effective security monitoring and incident handling.
• Continuously improve SOC policies, operational playbooks and the overall incident‑management framework.

Required profile

• Minimum of 7 years of experience in security incident response, SOC operations or related fields.
• Proven ability to work autonomously on technical activities such as threat hunting and use‑case development.
• Strong understanding of current cyber‑threat landscape and mitigation techniques.
• Experience partnering with business CSIRTs and supporting compliance with regulatory requirements.

Required skills

• SIEM platforms
• SOAR platforms
• MITRE ATT&CK framework
• Threat hunting
• Security Incident Response