- Outram Central Region (Singapore) Singapore
全职 Senior Incident Response Expert 工作, 薪水 up to SGD 15,000, RESOURCE CONSULTING PTE. LTD. Central Region (Singapore) 公司招聘中 - Ricebowl
分享
保存
工作地点
职位描述
岗位职责
Our client is a top-tier cyber consulting and incident response company, working with organizations worldwide to proactively build their cyber resilience, and to respond to and defeat cyber attacks. Sygnia is a trusted advisor of IT and security teams, senior managements, and boards of top organizations, including Fortune 100 companies. It is currently seeking a Senior Incident Response Expert to join their expanding team.
Main Responsibilities:
Take ownership in core IR effort or an entire work stream, and conduct complex IR tasks
Technically lead small-scale investigations and small-scale proactive engagements
Lead client communication on dedicated sessions and present reports
Participate in ad-hoc scoping calls
Lead publication efforts
Participate and lead hiring interviews for IR experts, review home assignments
Participate in forensic and incident response investigations, including large scale sophisticated attacks,conduct log analysis, host and network-based forensics and malware analysis.
Participate in threat hunting: proactively hunt for targeted attacks and new emerging threats in client’s networks; as well as security assessments and simulations.
Identify indicators of compromise (IOCs) and tools, tactics, and procedures (TTPs) to help ascertain whether and how breaches have occurred.
Utilize and develop tools and methodologies to improve Sygnia’s existing investigative and hunting technological stack.
Collaborate with IT and Security teams during investigations.
Generate and present a comprehensive and professional report of findings from investigations.
Requirements:
At least 5 years of a relevant experience
Demonstrates strong analytical and critical-thinking abilities.
Possesses a proactive approach to problem-solving and investigating complex security incidents
Demonstrates adaptability, continuous learning and the ability to work collaboratively within multidisciplinary teams.
Takes ownership of responsibilities and demonstrates commitment to delivering high-quality work.
Demonstrated in-depth understanding of the life cycle of advanced security threats, attack vectors and variant methods of exploration.
Deep technical understanding of network fundamentals and common Internet protocols.
Solid understanding of system and security controls on at least two OSs (Windows, Linux / Unix and MacOS), including host-based forensics and experience with analyzing OS artifacts.
Fluency with one or more scripting language (i.e. Python).
Multidisciplinary knowledge and competencies, such as:
Hands-on experience in data analysis (preferably network traffic or log analysis) in relevant data analysis and data science platforms (Jupyter, Splunk, pandas, SQL).
Familiarity with cloud infrastructure, web application and servers, android and iOS mobile platforms.
Experience with malware analysis and reverse engineering.
Familiarity with enterprise SIEM platforms (e.g. Splunk, *************, ArcSight).
Excellent communication and interpersonal skills. Fluent English, including the ability to document and explain technical information in a concise, understandable manner.
Ability to undertake international business travel, approximately 30% of working time, to support client engagements, on-site incident response investigations and other operational requirements
We regret that only shortlisted candidates will be notified.
EALicense No.: 08C3209
Registration No.: R1101742
RESOURCE CONSULTING PTE. LTD. is a Recruitment and HR Consulting company, offering job search services and strategic people solutions to MNCs and SMEs in Singapore and the Asia Pacific region.
Our team of experienced and dedicated professionals are committed to provide prompt and reliable services to our clients and candidates. We believe that our acute ability to understand our clients' needs and comprehensive approach to talent acquisition, assessment, management and development, have enabled us to support our clients in making people their sustainable source of competitive advantage.
Main Responsibilities:
Take ownership in core IR effort or an entire work stream, and conduct complex IR tasks
Technically lead small-scale investigations and small-scale proactive engagements
Lead client communication on dedicated sessions and present reports
Participate in ad-hoc scoping calls
Lead publication efforts
Participate and lead hiring interviews for IR experts, review home assignments
Participate in forensic and incident response investigations, including large scale sophisticated attacks,conduct log analysis, host and network-based forensics and malware analysis.
Participate in threat hunting: proactively hunt for targeted attacks and new emerging threats in client’s networks; as well as security assessments and simulations.
Identify indicators of compromise (IOCs) and tools, tactics, and procedures (TTPs) to help ascertain whether and how breaches have occurred.
Utilize and develop tools and methodologies to improve Sygnia’s existing investigative and hunting technological stack.
Collaborate with IT and Security teams during investigations.
Generate and present a comprehensive and professional report of findings from investigations.
Requirements:
At least 5 years of a relevant experience
Demonstrates strong analytical and critical-thinking abilities.
Possesses a proactive approach to problem-solving and investigating complex security incidents
Demonstrates adaptability, continuous learning and the ability to work collaboratively within multidisciplinary teams.
Takes ownership of responsibilities and demonstrates commitment to delivering high-quality work.
Demonstrated in-depth understanding of the life cycle of advanced security threats, attack vectors and variant methods of exploration.
Deep technical understanding of network fundamentals and common Internet protocols.
Solid understanding of system and security controls on at least two OSs (Windows, Linux / Unix and MacOS), including host-based forensics and experience with analyzing OS artifacts.
Fluency with one or more scripting language (i.e. Python).
Multidisciplinary knowledge and competencies, such as:
Hands-on experience in data analysis (preferably network traffic or log analysis) in relevant data analysis and data science platforms (Jupyter, Splunk, pandas, SQL).
Familiarity with cloud infrastructure, web application and servers, android and iOS mobile platforms.
Experience with malware analysis and reverse engineering.
Familiarity with enterprise SIEM platforms (e.g. Splunk, *************, ArcSight).
Excellent communication and interpersonal skills. Fluent English, including the ability to document and explain technical information in a concise, understandable manner.
Ability to undertake international business travel, approximately 30% of working time, to support client engagements, on-site incident response investigations and other operational requirements
We regret that only shortlisted candidates will be notified.
EALicense No.: 08C3209
Registration No.: R1101742
RESOURCE CONSULTING PTE. LTD. is a Recruitment and HR Consulting company, offering job search services and strategic people solutions to MNCs and SMEs in Singapore and the Asia Pacific region.
Our team of experienced and dedicated professionals are committed to provide prompt and reliable services to our clients and candidates. We believe that our acute ability to understand our clients' needs and comprehensive approach to talent acquisition, assessment, management and development, have enabled us to support our clients in making people their sustainable source of competitive advantage.
重要安全守则
申请工作时，切勿提供您的银行或信用卡详细资料。不要转账或完成无关的在线调查问卷。如果您发现可疑内容，请举报此招聘广告。
了解更多