Cyber Security Engineer - Threat Management and Incident Response

Job Overview

Join the Group Information Security Team at Singapore Airlines as a Cyber Security Engineer focused on managing threats and responding to incidents affecting the corporate networks, on-premises and cloud systems, and digital assets.

Key Responsibilities

• Conduct security monitoring and coordinate incident response activities within Scoot's network environment using diverse cybersecurity tools and methodologies.
• Oversee operations within the Security Operations Center (SOC).
• Proactively hunt for security incidents by analyzing security-related datasets to detect anomalies.
• Correlate data from various devices to identify unusual behaviors indicating potential threats.
• Maintain thorough documentation of incident analysis and response activities.
• Create repeatable methods to identify malicious activities effectively.
• Offer recommendations aimed at improving threat detection and protective measures.
• Communicate complex technical cybersecurity topics clearly to both technical professionals and non-technical stakeholders.
• Establish and adhere to detailed operational processes for incident analysis, escalation, and remediation assistance.
• Manage multiple high-priority tasks simultaneously in a dynamic, fast-paced environment, providing timely responses and recommendations.
• Develop and maintain security documentation including technical standards, operational procedures, and system hardening guidelines.
• Analyze logs from endpoints, networks, and applications to identify security events.
• Collaborate with other IT teams on security-related concerns.
• Engage with vendors and liaise with parent company security teams for security assessments.

Qualifications and Skills

• A degree in Computer Engineering, Computer Science, Information Systems, or a related discipline is required.
• Possesses 5 to 6 years of experience in cybersecurity with a strong emphasis on incident response and security operations.
• Proven background in Cyber Security Operations and experience within a Security Operations Centre or Computer Incident Response Team.
• Strong problem-solving capabilities and experience conducting root cause and post-incident analyses.
• Solid understanding of computer networks, protocols, and knowledge of significant cyber threat actors and Advanced Persistent Threat (APT) groups.
• Experience using Threat Intelligence Platforms and Security Information and Event Management (SIEM) systems, particularly Splunk.
• Professional certifications such as GCIA, CISSP, CISM, CISA, ISMS, TOGAF, or SABS are advantageous.
• Excellent interpersonal skills, with the ability to collaborate effectively and also work independently.

Additional Information

Only shortlisted applicants will be contacted. We appreciate the interest of all candidates in Singapore Airlines.