Senior Detection & Response Engineer (APAC)

About the role

Sopra Steria, a European technology group with over 51,000 employees, is hiring a Senior Detection & Response Engineer in its APAC region, based in Singapore which acts as the regional headquarters for its Infrastructure, Cloud and Cybersecurity services. The role leads technical activities in the IT Production Security Investigation & Incident Response team, using real-world attack scenarios and frameworks such as MITRE ATT&CK, and oversees the detection capabilities of the 24/7 regional SOC.

Key responsibilities

• Define, design, implement and enrich security use cases based on real-world attacks, and propose new use cases to detect, protect or mitigate threats
• Lead technical activities independently, including R&D and threat hunting, and oversee the regional SOC's detection capabilities
• Respond to cyber and IT security incidents, assess their type and severity, and identify recurring risks with mitigation plans and process improvements
• Partner with global, regional and local stakeholders, and contribute to the APAC Business CSIRT, local incident response and incident reporting
• Support bank compliance with regulatory requirements and internal policies, and take part in audit interviews
• Improve the SOC framework by reviewing policies and operational playbooks

Required profile

• Minimum 7 years of experience as a security professional, with 4+ years in security use case design, development and coding
• Overall cybersecurity incident response experience of 7+ years
• Ability to work autonomously, solve problems, communicate in English (French is an added advantage) and meet deadlines

Required skills

• Security use case design and development, with good working knowledge of Linux (RedHat/Ubuntu)
• SIEM product experience and security incident management
• Incident investigation, threat hunting, event analysis and reporting
• ELK stack (Elastic, Logstash, Kibana) experience is a plus
• Scripting in Python, PowerShell, Bash or SQL is a plus; professional credentials such as SANS, CISSP or OSCP are a plus

What we offer

• Hybrid working mode and work-from-abroad benefits, 18 days of annual leave
• Comprehensive health and insurance coverage
• Annual performance-based bonus
• Training programs, certifications and career development
• Team-building activities and social events