Digital Forensics Incident Responder

About the role

This role sits within the Connectivity, Cybersecurity & Resilience Group (C2R) of SGG, which strengthens the cybersecurity and resilience posture of the telecommunications and media sectors in Singapore. You will work with team members to prioritise daily tasks and respond to cybersecurity incidents from containment through to closure.

Key responsibilities

• Investigate cybersecurity incidents to determine the root cause, using log and digital forensic analysis or malware analysis, and assess threats, vulnerabilities and exploits.
• Recommend preventive actions and mitigations, as well as threat detection rules and signatures (for example Snort, Yara, Sigma).
• Prepare and review incident reports, and present incident briefings covering attack techniques, malware behaviour, risk and impact.
• Review and update incident response playbooks and keep up to date with cybersecurity trends and attacker TTPs.

Required profile

• Degree in Information Security, Computer Science, Engineering or equivalent.
• 5 years or more of related work experience in cybersecurity incident investigations or digital forensics.
• Strong analytical mindset, attention to detail, and good communication skills with diverse stakeholders.

Required skills

• Proficiency in forensic toolkits such as Magnet AXIOM, Encase, X-Ways, FTK or Autopsy.
• GIAC certifications (GCFA, GREM, GCFE, GCIH) are highly regarded.
• Experience in a Security Operations Centre (SOC) is advantageous.