Incident Response & Management
Lead and coordinate the full lifecycle of cybersecurity incidents - from identification to containment, eradication, recovery, and lessons learned.
Develop, maintain, and continuously improve incident response plans, playbooks, and runbooks.
Collaborate with internal teams, external vendors, and law enforcement (when required) to manage incident investigations and forensic analysis.
Perform root cause analysis and track incident trends to mitigate future risks.
Cyber Threat Intelligence
Integrate internal and external threat intelligence into incident response activities and detection use cases.
Monitor threat feeds and intelligence platforms to identify emerging threats and assess relevance to the organization's environment.
Produce actionable intelligence reports and briefings for technical teams and executive stakeholders.
Security Awareness & Education
Own and deliver the enterprise-wide cybersecurity awareness program.
Evaluate program effectiveness through metrics and feedback, and adapt content based on evolving threat trends and user behavior
Bachelor's degree in Cybersecurity, Computer Science, or related field. Certifications such as CISSP, GCIH, GCFA, CEH, or CTIA are highly valued.
7+ years of cybersecurity experience with at least 3 years in a lead role managing incident response and threat intelligence functions.
Deep understanding of incident response frameworks (e.g., NIST, SANS), MITRE ATT&CK, and threat hunting methodologies.
Practical experience with SIEM, EDR, SOAR, and threat intelligence platforms (e.g., MISP, Recorded Future, Anomali).
Demonstrated experience running cyber drills and tabletop exercises across technical and non-technical teams.
Strong communication and stakeholder management skills, with the ability to translate technical issues into business language.
Experience working in regulated industries (financial services, healthcare, etc.) is an advantage.
Pam Lim
Morgan Mckinley
EA Licence No: 11C5502 | EAP Registration No: R1106192