Senior Cyber Incident Responder

About the role

Keyrus is recruiting a Senior Cyber Incident Responder on behalf of a leading international financial institution operating across Asia‑Pacific. The position sits within a 24/7 Security Operations Center (SOC) and focuses on strengthening detection capabilities, developing use cases and handling security incidents for the regional production environment.

Key responsibilities

• Design, implement and enrich security use cases using real‑world attack scenarios and the MITRE ATT&CK framework.
• Monitor threat intelligence feeds and translate findings into actionable detection logic.
• Respond to, investigate and triage cyber/IT security incidents, assessing severity and impact.
• Oversee detection capabilities for the 24/7 regional IT Production SOC.
• Drive continuous improvement of SIEM, SOAR platforms and operational playbooks.
• Collaborate with regional and global stakeholders on alert handling and security monitoring.
• Identify recurring security risks and propose mitigation and process‑improvement plans.
• Conduct threat‑hunting and research‑and‑development activities to enhance the overall security posture.

Required profile

• 7+ years of experience in cybersecurity incident response.
• 4+ years specifically in security use‑case design, development and coding.
• Strong knowledge of the MITRE ATT&CK framework.
• Good English communication skills.
• Experience in financial services or other regulated industries is a plus.

Required skills

• Hands‑on experience with SIEM platforms and security incident management.
• Proficiency with Linux (RedHat/Ubuntu) environments.
• Familiarity with ELK/Elastic SIEM stack.
• Scripting/programming: Python, PowerShell, Bash, SQL, Java.
• Experience with SOAR platforms.
• Security certifications such as CISSP, OSCP, SANS/GIAC.
• Knowledge of French language is advantageous.