Cyber Incident Responder

2 weeks ago


Central Singapore BNP Paribas Full time

**POSITION PURPOSE**:
APAC Production Security teams are responsible for multiple IT Security activities for BNP Paribas in Asia Pacific region, such as:
IT Production Security Governance, PMO & Risks

Network Security and Security Design & Architecture

Vulnerability & Compliance Management

IAM Production

Production CSIRT, Detection & SIEM Engineering

Production support of the Security platforms

Team is looking for Cybersecurity expert/SME in Detection Engineering & Security Investigation areas, part of Production SOC & Security Investigation & Incident Response team.

Your role will be to:
Act as reference point in team of experts on Security Incident Response activities, Anti-Malware/Defense activities and Security Detection activities,

Oversee the detection capabilities for the 24/7 regional IT Production SOC which handles the IT Production security alerts for the APAC region,

Contribute to the enhancement of SIEM and SOAR capabilities,

Strengthen the detection capabilities in APAC and be member of the Global Use Case committee for a worldwide alignment of the security use cases.

Participate to the global continuous improvement of the framework of tools and processes for Security Incident Management, Anti-Malware/Defense and Security Detection,

Collaborate with the APAC Business CSIRT, accountable for the Security Incident practice in APAC, to strengthen the extended security monitoring setup between Business Information Security and IT Production Security.

**Direct Responsibilities**

Lead technical activities (definition, R&D/threat hunting) in the team of IT Production Security Investigation & Incident Response and oversee the detection capabilities of the 24/7 regional IT Production SOC

Respond to Cyber / IT security incidents and evaluates the type and severity of security events.

Identify recurring security issues and risks and develops mitigation plans and recommends process improvements.

Partner with global, regional and local stakeholders to ensure organizational and procedural efficiency and readiness for detection of suspicious events and reaction

Continuously improve the processes to strengthen the current SOC framework via review of policies and operational playbooks

Steer the regional threat modeling, identification of threat vectors and development of related security monitoring capabilities

Report to global regional and local stakeholders on the strategic and operational aspects of these activities

**Contributing Responsibilities**

Partner with the APAC Business CSIRT for integrated security monitoring and alert/incident handling operations.

Contribute to local security incident response outside the direct scope of responsibilities (i.e., local IT production in some APAC business entities)

Contribute to the Bank compliance with regulatory requirements and internal policies

Contribute to the reporting of all incidents according to the Incident Management System

Contribute to the control frameworks in day‐to‐day business activities, such as Control Plan; Participate to Audit interview and provide the require evidence

**Competencies**

Requires a minimum of 8+ years of experience as security professional

Excellent interpersonal and communication skills; ability to influence and motivate

Ability to handle high pressure situations with key stakeholders to collaborate and communicate effectively and respectfully with both business-oriented executives and technology-oriented personnel in teams across the organization

Experience of performing security monitoring and incident response activities in an advanced Security Operation Centers (SOC) environment (log analysis, event analysis, incident investigation, reporting)

Experience and knowledge in investigating incidents, remediation, tracking and follow-up for incident closure with concerned teams, stakeholders.

Exhaustive technical knowledge and hands on experience in several security domains

Thorough understanding of technologies and security concepts, with knowledge & hands on experience in SIEM Product and Security Incident Management

Program and project management expertise

Taking initiative; be proactive and run decision-making processes autonomously

Client focus and Results oriented: understand the business processes that IT & Security solutions provide and work on continuous enhancement

Strategic vision: ability to develop strategic targets and to build paths to achieve them

Communication skills: excellent communication and advocacy skills, both verbal and written, with the ability to express complex technical issues in an easily understood manner

Analytical skills: interpretation of complex situations and elaboration of adapted solutions in a proactive way

Rigor & Accuracy: focus on robust deliverables for long term achievements

Flexibility: capacity to adapt in a fast-paced changing environment

**Specific Qualifications**

Successful people management experience

Professional credentials in one of t



  • Singapore UBS Full time

    Singapore Risk Group Functions **Job Reference #** 247495BR **City** Singapore **Job Type** Full Time **Your role** Are you from the World of Cyber? Are you the one to defend the organization against advance threat? Do you have what it takes to coordinate and respond to cyber-attacks? - respond to cyber security incidents covering all phases...


  • Singapore UBS AG Full time

    Roles & ResponsibilitiesYour role : Are you keen on working in world class Cyber Security Operations Center for one of the best Swiss private banks? Do you have related experience and are willing to take it further by learning how to defend an enterprise against cyber-attacks? We are looking for an incident response expert who will:• respond to cyber...


  • Singapore UBS AG Full time

    Roles & ResponsibilitiesYour role : Are you keen on working in world class Cyber Security Operations Center for one of the best Swiss private banks? Do you have related experience and are willing to take it further by learning how to defend an enterprise against cyber-attacks? We are looking for an incident response expert who will:• respond to cyber...


  • Singapore NOBILITY SERVICES SINGAPORE PTE. LTD. Full time

    Roles & Responsibilities Job Requirements:Degree/ Diploma in Computer Science/IT, Engineering or equivalent. Must have 6 – 8 years in IT Security and 3- 5 Cybersecurity experience, responding to IT Security incidents/ monitoring. Must have minimum 3-5 years of experience in Cloud Infrastructure services for Amazon, Ali cloud or Google including Cloud...


  • Singapore NOBILITY SERVICES SINGAPORE PTE. LTD. Full time

    Roles & Responsibilities Job Requirements:Degree/ Diploma in Computer Science/IT, Engineering or equivalent. Must have 6 – 8 years in IT Security and 3- 5 Cybersecurity experience, responding to IT Security incidents/ monitoring. Must have minimum 3-5 years of experience in Cloud Infrastructure services for Amazon, Ali cloud or Google including Cloud...


  • Singapore Stefanini North America and APAC Full time

    Job DescriptionThe IT Security Incident Responder will participate in the creation, modification, and maintenance of all Cyber Monitoring policies and procedures. The individual will also be required to keep abreast of cyber security trends and the emerging threat landscape in general. Strong oral and written communication skills are essential for this role.


  • Singapore JJ Consulting Services Full time

    **Roles and Responsibilities** - Manage Security Incidents from detection to closure - Analyse security events and confirm security incidents - Drive response and resolution of security incidents - Coordinate with Major Incident Management Team and WAR room setup - Lead root cause analysis, post-mortem reporting and preventive actions. **Requirements**: -...


  • Singapore NOBILITY SERVICES SINGAPORE PTE. LTD. Full time

    Roles & ResponsibilitiesJob Requirements:Degree/ Diploma in Computer Science/IT, Engineering or equivalent. Must have 9 – 12 years in IT Security and 5-7 Cybersecurity experience, responding to IT Security incidents/ monitoring. Must have minimum 5 years of experience in Cloud Infrastructure services for Amazon, Ali cloud or Google including Cloud...


  • Singapore NETS Group Full time

    We are looking for a highly motivated Security Threat Analyst to join our team at the NETS Group. As a key member of our security operations centre, you will be responsible for analysing security data to detect and respond to cyber threats.Your main responsibility will be to analyse logs, network traffic, and security data to identify patterns or security...


  • Central Singapore Chevron Full time

    All interested applicants, please read the Data Privacy Notice Responsibilities for this position may include but are not limited to: - Responsible for supporting 24/7 cyber threat monitoring and incident response, leveraging threat intelligence to proactively hunt for and respond to external cyber threats to Chevron's global network infrastructure,...


  • Singapore CYBER SENSE TECHNOLOGIES PTE. LTD. Full time

    **Role Overview**: Cybersense Advanced Cyber Threat Services team is looking for a technical, passionate pragmatic information security professional with vast Emergency Incident Response/Cybersecurity experience to be part of our Emergency Incident Response team. You must be a strong leader/Snr with excellent people and management skills with ability to...


  • Singapore ITCAN PTE. LIMITED Full time

    Roles & ResponsibilitiesCompetencies (Technical / Behavioral) Role Specific Technical Skills:Requires a minimum of 7 or more years of experience as security professional Experience in security usecase design/development with understanding of Java language. Good working knowledge of Linux (RedHat/Ubuntu). Working knowledge to interpret security logs or...


  • Singapore ITCAN PTE. LIMITED Full time

    Roles & ResponsibilitiesCompetencies (Technical / Behavioral) Role Specific Technical Skills:Requires a minimum of 7 or more years of experience as security professional Experience in security usecase design/development with understanding of Java language. Good working knowledge of Linux (RedHat/Ubuntu). Working knowledge to interpret security logs or...


  • Singapore NOBILITY PLACEMENT SERVICES PTE. LTD. Full time

    Roles & ResponsibilitiesJob Requirements:§ Degree/ Diploma in Computer Science/IT, Engineering or equivalent.§ Must have 9 – 12 years in IT Security and 5-7 Cybersecurity experience, responding to IT Security incidents/ monitoring§ Must have minimum 5 years of experience in Cloud Infrastructure services for Amazon, Ali cloud or Google including Cloud...


  • Singapore NOBILITY PLACEMENT SERVICES PTE. LTD. Full time

    Roles & Responsibilities Job Requirements: § Degree/ Diploma in Computer Science/IT, Engineering or equivalent. § Must have 9 – 12 years in IT Security and 5-7 Cybersecurity experience, responding to IT Security incidents/ monitoring § Must have minimum 5 years of experience in Cloud Infrastructure services for Amazon, Ali cloud or Google including...


  • Singapore NOBILITY PLACEMENT SERVICES PTE. LTD. Full time

    Roles & ResponsibilitiesJob Requirements:§ Degree/ Diploma in Computer Science/IT, Engineering or equivalent.§ Must have 9 – 12 years in IT Security and 5-7 Cybersecurity experience, responding to IT Security incidents/ monitoring§ Must have minimum 5 years of experience in Cloud Infrastructure services for Amazon, Ali cloud or Google including Cloud...


  • Singapore ROBERT WALTERS (SINGAPORE) PTE LTD Full time

    Roles & ResponsibilitiesWhat You'll DoLead technical activities in security use case design, implementation, and enrichment using frameworks like MITRE ATT&CK. Stay ahead of evolving threats, proposing proactive detection and mitigation strategies. Oversee threat hunting and detection R&D efforts to strengthen SOC detection posture. Respond to and manage...


  • Singapore ROBERT WALTERS (SINGAPORE) PTE LTD Full time

    Roles & ResponsibilitiesWhat You'll DoLead technical activities in security use case design, implementation, and enrichment using frameworks like MITRE ATT&CK. Stay ahead of evolving threats, proposing proactive detection and mitigation strategies. Oversee threat hunting and detection R&D efforts to strengthen SOC detection posture. Respond to and manage...


  • Singapore SAP Full time

    **What we offer** **Summary** As an investigator in SAP's Global Security Operations team you will join a global team of security practitioners to mature SAP's security. You will be located in Singapore, one of the global security hubs, and reporting directly to the Head of Security Operations APJ. The main work will be to develop the SOC and DFIR...


  • Singapore SIX FINANCIAL INFORMATION SINGAPORE PTE. LTD. Full time

    SIX operates the infrastructure underpinning the Swiss financial sector and offers a comprehensive range of services around the world in the fields of securities trading and settlement, financial information and payment transactions.- **JJob Introduction The SIX Security Monitoring & Incident Response (SMIR) is the central incident response team for the SIX...