Cyber Incident Responder – Detection Engineering & Security Investigation

About the role

The Cyber Incident Responder Team is looking for a seasoned cybersecurity expert to strengthen detection capabilities across the APAC region and to contribute to the global use‑case development effort. You will work within the Production SOC and Security Investigation & Incident Response team, ensuring robust security monitoring and rapid response to threats.

Key responsibilities

• Lead the definition, design, implementation and enrichment of security use cases based on real‑world attack scenarios and frameworks such as MITRE ATT&CK.
• Enhance SIEM and SOAR capabilities and oversee detection coverage for the 24/7 regional IT Production SOC.
• Act as a reference point for security incident response, anti‑malware, and detection activities.
• Collaborate with the APAC Business CSIRT to integrate security monitoring and incident handling.
• Continuously improve processes, policies and playbooks for security incident management.
• Identify recurring security issues, develop mitigation plans and support compliance with regulatory requirements.

Required profile

• Minimum 7 years of experience in detection engineering, security investigation or incident response.
• Strong knowledge of MITRE ATT&CK and ability to translate threat intelligence into actionable use cases.
• Proven ability to work autonomously and lead technical activities in a SOC environment.
• Excellent analytical skills and experience handling high‑severity security incidents.

Required skills

• SIEM platforms
• SOAR orchestration tools
• MITRE ATT&CK framework
• Threat hunting techniques
• Security incident response
• Anti‑malware/defense technologies
• Security use‑case development