Senior Cyber Security Consultant

About the role

Singtel is looking for a Senior Cyber Security Consultant to act as the enterprise cyber security technical focal point during cyber incidents. The role works closely with the SOC, CISO, infrastructure, network, cloud, application and vendor teams, and covers incident response, threat hunting, vulnerability management and security monitoring improvements.

Key responsibilities

• Support cyber incident response: triage, investigation, containment coordination, evidence gathering, remediation tracking and post-incident review.
• Conduct proactive threat hunting across enterprise infrastructure using SIEM, EDR, NDR, vulnerability management, asset discovery and other tools, and develop detection use cases, playbooks, procedures and escalation workflows.
• Identify suspicious behaviour, attack patterns, lateral movement, privilege misuse, exposed services and anomalous access.
• Improve security monitoring by finding gaps in logs, telemetry, asset visibility and detection rules, and work with SOC and central security teams to raise alert quality and incident response readiness.
• Support vulnerability management and risk-based remediation, and initiatives such as NDR, micro-segmentation, Zero Trust, PIAM/IAM and security tool integration.
• Take part in security assessments, threat reviews, tabletop exercises and incident simulations, and support root cause analysis and remediation tracking to closure.
• Prepare management reports, investigation summaries, threat hunting findings, risk updates, incident dashboards and security posture metrics.
• Support cybersecurity audits, regulatory requests, internal governance and evidence collection, and maintain incident response runbooks, SOPs, escalation guides and checklists.
• Advise internal teams on security best practices, incident handling, evidence preservation, secure configuration and remediation.

Required profile

• Bachelor's degree or diploma in Cybersecurity, IT, Computer Science, Engineering or a related field.
• Minimum 7 years of experience in cybersecurity operations, incident response, threat hunting, SOC operations, detection engineering, infrastructure security or related roles.
• Experience in complex, regulated, telecom, infrastructure-heavy or enterprise-scale environments.
• Ability to work across multiple teams during incidents and security projects.

Required skills

• Cyber incident response lifecycle and hands-on experience with SIEM, EDR, NDR, vulnerability management, threat intelligence platforms, asset discovery, firewalls and endpoint/network security controls.
• Network security, TCP/IP, routing, firewalls, VPNs, DNS, authentication, Windows/Linux, Active Directory and cloud security fundamentals.
• Analyzing logs, alerts, network traffic, endpoint telemetry and security events; familiarity with MITRE ATT&CK, Cyber Kill Chain and threat hunting methodologies.
• Preferred: incident response or threat hunting certifications (e.g. GCIH, GCIA, CySA+), and cybersecurity certifications (e.g. CISSP, CISM, Security+).
• Preferred: scripting and automation with PowerShell, Python, KQL, SPL and APIs, and exposure to Microsoft Sentinel, Splunk, CrowdStrike, Tenable, Qualys, Darktrace, Palo Alto, Illumio, CyberArk, Delinea, Device42 or similar.