A bachelor's degree in Computer Science or Information Security, or equivalent, is required.
Understanding of operating systems and platforms such as Windows and Linux, and knowledge of computer networking, local area networks, and servers.
Proficiency with forensic tools such as AXIOM, FTK, or Autopsy.
Ability to perform basic static and dynamic malware analysis and analyze network and application logs.
Familiarity with good security practices.
Good communication and interpersonal skills, with the ability to multitask and prioritize.
Meticulousness, integrity, initiative, energy, and endurance are required.
Responsibilities
Ensure delivery of cybersecurity operations services across all stages of the incident response lifecycle, including triaging potential security events, conducting in-depth investigations, and advising on containment, eradication, and recovery strategies.
Lead incident response activities through all phases of an incident.
Conduct triage and investigation of potential cybersecurity incidents to determine incident scope and severity.
Develop and execute containment strategies.
Investigate incidents and conduct root cause analysis to identify attack vectors, tactics, and impact.
Conduct comprehensive security event log analysis to validate security detections, investigate alerts, and identify attacks across endpoint system logs or endpoint detection and response telemetry, network traffic logs, application logs, and cloud service logs and audit trails.
Acquire and analyze digital forensic artifacts from endpoint systems and servers, network devices and logs, cloud environments, mobile devices, and storage media.
Maintain clear stakeholder communication throughout the incident lifecycle and prepare comprehensive post-incident reports with preventive recommendations.
Provide expert input for automating Security Operations, such as implementing Security Orchestration, Automation and Response playbooks.
Develop and test incident response playbooks and processes.
Maintain situational awareness of the cybersecurity landscape and emerging threat actor tactics, techniques, and procedures.
Desired Qualifications
Professional certifications, including GCFA, GREM, GNFA, GCTI, CISSP, or other relevant certifications, are preferred.
Preferably five or more years of experience as a full-time incident responder, digital forensic analyst, malware analyst, or in a related discipline.
Good working knowledge of cloud and container technologies is a plus.
Assurity Trusted Solutions (ATS) is a wholly owned subsidiary of the Government Technology Agency (GovTech). As a Trusted Partner over the last decade, ATS offers a comprehensive suite of products and services ranging from infrastructure and operational services, authentication services, governance and assurance services as well as managed processes. In a dynamic digital and cyber landscape, where trust & collaboration are key, ATS continues to drive mutually beneficial business outcomes through collaboration with GovTech, government agencies and commercial partners to mitigate cyber risks and bolster security postures.
We are looking for a Cybersecurity Engineer with a background in Incident Response to join us!
The successful candidate will ensure the delivery of cybersecurity operations services across all stages of the incident response lifecycle. This encompasses triaging potential security events, conducting in-depth investigations and advising on containment, eradication and recovery strategies. Candidate must possess strong log analysis and digital forensics skills to drive effective responses to cybersecurity incidents that ensure secure delivery of applications and infrastructure services. Critical thinking and great communication skills are required to articulate technical concepts and guide decision makers towards optimal courses of action. This is a key position in the Cyber Incident Response Team (CIRT).
Responsibilities:
Lead incident response activities through all phases of an incident:
Conduct triage and investigation of potential cybersecurity incidents to determine incident scope and severity
Develop and execute containment strategies
Perform investigations and root cause analysis to identify attack vectors, tactics, and impact.
Conduct comprehensive security event log analysis to validate security detections, investigate alerts, and identify attacks across multiple data sources including:
Endpoint system logs or Endpoint detection and response (EDR) telemetry
Network traffic logs
Application logs
Cloud service logs and audit trails
Conduct digital forensic acquisition and analysis of artifacts from various sources including:
Endpoint systems and servers
Network devices and logs
cloud environments
Mobile devices and storage media
Maintain clear stakeholder communication throughout incident lifecycle and prepare comprehensive post-incident reports with preventive recommendations.
Provide expert input for automating Security Operations (E.g Implement SOAR playbooks).
Develop and test incident response playbooks and processes.
Maintain situational awareness of cyber security landscape and emerging threat actor TTPs
Bachelors Degree in Computer Science/Information Security or equivalent.
Professional certifications, including GCFA, GREM, GNFA, GCTI, CISSP or other relevant certifications will be preferred.
Preferably 5 years or more of experience as a full-time incident responder/digital forensic/malware analysis or related discipline.
Understanding of operating systems and platform (e.g. Windows, Linux) and knowledge of computer networking, LAN, and server.
Proficient in Forensic Tools such as AXIOM, FTK or Autopsy.
Ability to perform basic static and dynamic malware analysis and to analyse network and application logs.
Good working knowledge of Cloud and Container technologies are a plus.
Familiarity with good security practices.
Good communication and interpersonal skills, with the ability to multitask and priortise.
Meticulous and demonstrate a high degree of integrity, initiative, energy and endurance.
Join us and discover a meaningful and exciting career with Assurity Trusted Solutions!
The remuneration package will commensurate with your qualifications and experience. Interested applicants, please click "Apply Now".
We thank you for your interest and please note that only shortlisted candidates will be notified.
By submitting your application, you agree that your personal data may be collected, used and disclosed by Assurity Trusted Solutions Pte. Ltd. (ATS), GovTech and their service providers and agents in accordance with ATS’s privacy statement which can be found at: or such other successor site.
A wholly-owned subsidiary of GovTech.
We promote a learning culture and encourage you to grow and learn.