SOC Lead

2 weeks ago

Singapore GOLDTECH RESOURCES PTE LTD Full time
Roles & Responsibilities

Join our global Security Operations Center (SOC) as a Security Analyst III, where you'll play a crucial role in delivering Managed Security Services (MSS) to global clients. You'll lead incident investigations, optimize detection strategies and collaborate across teams to proactively defend enterprise infrastructure. This role is ideal for seasoned professionals with strong SOC experience and hands-on expertise in SIEM, EDR, threat intel and cloud security.

Key Responsibilities

Incident Response & Forensics

  • Lead the incident response lifecycle: detection, triage, containment, eradication and recovery.
  • Conduct forensic analysis on endpoints, network logs and systems to determine root cause and impact.
  • Coordinate with internal teams and external stakeholders during critical incidents.
  • Document incident reports including RCA and recommended mitigations.
  • Maintain and improve playbooks, runbooks and response documentation.

Detection Engineering

  • Design and deploy high-fidelity detection rules using SIEM tools (Splunk, Sentinel, QRadar, Devo).
  • Tune and optimize alerts, rules and correlation logic to minimize false positives.
  • Build use cases aligned with MITRE ATT&CK and red team simulations.
  • Collaborate with red/purple teams to validate and enhance detection logic.

Threat Hunting & Intelligence

  • Proactively hunt for threats using telemetry from SIEM, EDR and NDR tools.
  • Develop threat hypotheses based on TTPs, incident trends and threat intel.
  • Enrich detection and response efforts with internal and external threat intelligence.
  • Maintain and contribute to threat intelligence repositories and documentation.
  • Map adversary behavior to frameworks like MITRE ATT&CK and the Diamond Model.

Collaboration & Mentorship

  • Mentor junior SOC analysts (L1/L2) and provide escalation support.
  • Engage directly with clients to review security posture, key metrics and incidents.
  • Drive process improvements, automation and updates to SOC SOPs.
  • Act as the primary contact for escalated incidents and maintain consistent client engagement.

Requirements

Core Experience & Knowledge

  • 8–10 years of hands-on experience in SOC/MSS environments.
  • Proven incident response and forensic investigation experience.
  • Deep understanding of cyberattack tactics, techniques and procedures (TTPs).
  • Familiarity with compliance frameworks (GDPR, NIST, PCI-DSS).

Technical Proficiency

  • Expert in SIEM tools: Splunk, QRadar, Microsoft Sentinel, Devo.
  • Strong experience with EDR tools (e.g., CrowdStrike, Microsoft Defender).
  • Proficient in SOAR platforms and automation workflows.
  • Exposure to malware analysis across Windows, Linux and Mac systems.
  • Experience with firewalls (Cisco, Palo Alto, Fortinet, Checkpoint).
  • Scripting knowledge (Bash, Python, etc.) for automating SOC tasks.

Cloud & OS Knowledge

  • Solid understanding of Linux and Windows environments.
  • Hands-on experience with cloud security across AWS, Azure or GCP.
  • Comfortable using Linux CLI and basic troubleshooting commands.

Education & Certifications (Preferred)

  • Bachelor's degree in Cybersecurity, Computer Science or related fields.
  • Relevant security certifications (e.g., GCIA, GCIH, CISSP or equivalent) are a plus.

Please send your detailed resume in MS Word format to resume@goldtecHRs.com with

  • Education Level
  • Working experiences
  • Each employment background
  • Reason for leaving each employment
  • Last drawn salary
  • Expected salary
  • Date of availability
Tell employers what skills you have

Tactics
Mac
Security Operations
Azure
Forensic Analysis
Investigation
Scripting
Mentorship
Engineering Design
Telemetry
Windows
Threat Intelligence
Simulations
Checkpoint
CISSP
Malware Analysis

  • SOC Lead Consultant

    2 weeks ago

    Singapore NCS Group Full time

    Direct message the job poster from NCS GroupTalent Acquisition Business Partner @ NCS Group | Driving Growth Through People | Strategic Recruiter & Talent AdvisorNCS is a leading technology services firm that operates across the Asia Pacific region in over 20 cities, providing consulting, digital services, technology solutions, and more. We believe in...

  • SOC Engineering Lead

    7 days ago

    Singapore TechBridge Market Full time

    **Job Information**: Workplace - On-SiteIndustry - Computer and Network SecurityCity - SingaporeState/Province - No valueCountry - SingaporeZip/Postal Code - 000000- If you are passionate about playing a key role in the success of the region’s largest pure-play cybersecurity expertise and innovation, we want to hear from you!- Our client is a...

  • L2 SOC Analyst Lead

    3 days ago

    Singapore Monster SG Pte Limited Full time

    Roles & Responsibilities We are seeking a seasoned Level 2 SOC Analyst Lead to spearhead threat operations, mentor junior analysts, and drive advanced investigations within a high-stakes 24/7 Security Operations Center. You will be responsible for incident response leadership, threat hunting, forensic analysis, and client governance, while ensuring...

  • Senior SOC Operations Lead

    22 hours ago

    Singapore beBeeSecurity Full time $100,000 - $150,000

    About the RoleThe Senior SOC Operations Lead is a key position that oversees the daily operations of our Security Operations Center (SOC). This senior-level role provides strategic leadership and technical guidance to ensure the highest level of security operations for our clients.ResponsibilitiesLead by example, providing technical guidance and oversight to...

  • soc analyst lead

    4 weeks ago

    Singapore INFINITY CYBERSEC PTE. LTD. Full time

    Roles & ResponsibilitiesJob OverviewWe seek an L2 SOC Lead with active threat hunting, incident response, and team leadership experience to manage a 5-8 member SOC team serving government and critical infrastructure sectors. Operating in 24/7 shifts, you will perform advanced triage, conduct forensic investigations, front client engagements, and maintain...

  • L2 SOC Analyst Lead

    4 weeks ago

    Singapore PERCEPT SOLUTIONS PTE. LTD. Full time

    Roles & ResponsibilitiesWe are seeking a seasoned Level 2 SOC Analyst Lead to spearhead threat operations, mentor junior analysts, and drive advanced investigations within a high-stakes 24/7 Security Operations Center. You will be responsible for incident response leadership, threat hunting, forensic analysis, and client governance, while ensuring alignment...

  • SOC Manager

    1 week ago

    Singapore NCS Full time

    **SOC Manager**: **Date**:17 Dec 2024 **Location**: Singapore, Singapore **Company**:Singtel Group NCS is a leading technology services firm that operates across the Asia Pacific region in over 20 cities, providing consulting, digital services, technology solutions, and more. We believe in harnessing the power of technology to achieve extraordinary...

  • SOC Manager

    7 days ago

    Singapore GATEWAY SEARCH PTE. LTD. Full time

    **Responsibilities** - Responsible for the success of the Managed Security Services. - Design, build, operate and maintain the Security Operations Center (SOC). - Attain and maintain SOC certifications. - Well-versed in technologies such as SIEM, EDR, SOAR, Network Analytics, Endpoint Analytics, Threat Intelligence, Threat Intelligence Platform. - Train and...

  • SOC Manager

    2 weeks ago

    Singapore ENSIGN INFOSECURITY (CYBERSECURITY) PTE. LTD. Full time

    **Responsibilities** - Lead the overall day-to-day work of the security operations center in ensuring events and/or incidents are detected and responded to established process as per the agreed standing order. - Recruit, manage, develop, and retain the SOC analysts. - Develop and revise the framework, procedures and processes that are required to ensure...

  • SOC Manager in Singapore

    7 days ago

    Singapore U3 Infotech Pte Ltd. Full time

    SOC Manager Job **Responsibilities**: Managing day to day SOC operations Work closely with HQ SOC team members, oversees, manages ,improves security policies, Standard Operating Procedures, incident response workflows, playbooks, etc Work closely with presales consultant in prospecting new customers Establish connect with prospective clients by...