Incident Manager - Lead

We are seeking an experienced Cybersecurity Incident Manager to join the Security Operations Centre (SOC), with a strong focus on security incident response, incident management and Cyber Threat Intelligence.

This is a hands-on specialist role responsible for managing complex security incidents from initial detection through containment, resolution and post-incident remediation. You will act as a key technical escalation point for the SOC, working closely with security analysts, subject matter experts and stakeholders to ensure timely and effective response to sophisticated cyber threats.

Key Responsibilities

Incident Response & Management

• Lead and manage security incidents from initial detection through resolution and recovery.
• Coordinate incident response activities and ensure timely containment, eradication and remediation.
• Provide technical escalation and guidance to the SOC during complex or high-severity security incidents.
• Conduct post-incident analysis and identify improvements to reduce the likelihood and impact of future incidents.
• Develop and communicate clear incident summaries and management updates to relevant stakeholders.

Cyber Threat Intelligence

• Analyse emerging threats, threat actors, attack vectors and adversary Tactics, Techniques and Procedures (TTPs).
• Provide intelligence-driven recommendations to support containment, eradication and recovery activities.
• Track threat actor infrastructure and campaigns to identify emerging risks.
• Translate threat intelligence into actionable insights to enhance detection and proactive defence.
• Develop and enhance Threat Intelligence products and assessments.

Collaboration & Leadership

• Work closely with SOC analysts and cybersecurity subject matter experts during incident investigations and response activities.
• Collaborate with internal and external stakeholders to ensure effective communication and alignment.
• Mentor junior team members and contribute to a culture of technical excellence and proactive defence.
• Maintain relationships with the wider threat intelligence community and information-sharing partners.

Requirements:

• Bachelor's degree or higher in Information Security, Computer Science, Computer Engineering or a related discipline is preferred.
• Minimum 5 years of cybersecurity experience, with demonstrated progression into senior incident response, incident management, threat hunting or threat intelligence roles.
• Strong hands-on experience managing complex and sophisticated security incidents in demanding environments.
• Expert knowledge of the incident response lifecycle, including detection, containment, eradication, recovery and post-incident analysis.
• Proven experience in Threat Intelligence or Threat Hunting, ideally including building or enhancing capabilities from the ground up.
• Strong understanding of MITRE ATT&CK, Cyber Kill Chain and Diamond Model frameworks.
• Experience working with enterprise security technologies including SIEM, EDR and Threat Intelligence Platforms (TIPs).
• Relevant certifications such as CISSP, GCTI, GREM or GEIR will be advantageous.
• Strong analytical, communication and stakeholder management skills.

If you are interested in this opportunity and meet the requirements outlined above, we encourage you to apply. Please note that only shortlisted candidates will be contacted.

Pam Lim

EA Licence No: 11C5502

EAP Registration No: R1106192