SOC Lead (Security Operations Center)
Singapore
Full time
Hybrid
Compensation is not specified
Role
Security Engineer
Description
We are seeking a skilled SOC Lead to head our Global Cybersecurity Operations team. The position entails overseeing the security operations ecosystem around the clock, directing the strategic and technical advancement of our cybersecurity operating model. Key responsibilities include ensuring continuous monitoring coverage, serving as the principal technical escalation point, and designing a sophisticated defense infrastructure.
The role focuses on expanding a contemporary, multi-cloud, intelligence-driven SOC that heavily utilizes AI and advanced automation. Our ideal candidate is a hands-on technical leader proficient in cloud investigations, code-driven automation project management, and mentoring a high-performance engineering team.
Responsibilities:
- Operational Oversight & Escalation: Create, enhance, and optimize operational frameworks for continuous 24/7 monitoring. Act as the crucial escalation contact, ready to lead the response during significant security incidents.
- Advanced Investigations: Lead thorough investigations spanning various threat vectors, specializing in complex multi-cloud environments (AWS, Azure, GCP). Use CNAPP, EDR/XDR, and digital forensics tools for tracking sophisticated threat actors and reconstructing full-kill chain breaches.
- AI & Automation Strategy: Develop and execute the plan for our AI-fueled SOC. Supervise the creation of autonomous AI-driven agents and enhance intricate SOAR playbooks to minimize response times.
- Technical Project Leadership: Lead specific SOC projects aimed at enhancing EDR platforms, improving Email Security Gateways, and driving proactive threat-hunting campaigns. Collaborate with specialized Detection and SIEM Engineering teams to provide operational threat insights.
- Incident Command & Response: Act as the technical Incident Commander for critical security events. Coordinate end-to-end incident response tasks, giving high-stakes recommendations on mitigation and isolation.
- Mentorship & Talent Development: Actively mentor and uplift the technical proficiencies of SOC analysts. Establish ongoing learning structures, conduct technical tabletop exercises, and cultivate a culture of engineering excellence.
Requirements:
- 8+ years of hands-on Information Security experience, with a minimum of 3+ years in a senior or lead technical role within a SOC or Incident Response team.
- Demonstrated experience in establishing or managing operational frameworks for continuous 24/7 monitoring and on-call rotations.
- Extensive technical expertise in modern security architectures, encompassing EDR/XDR, Email Security Gateways, and Digital Forensics tools.
- Profound knowledge in Cloud Security Forensics across major cloud platforms like AWS, Azure, and GCP, including experience with CNAPP platforms.
- Proficient in programming and scripting languages (e.g., Python, Bash) for developing custom API integrations and automation tools.
- Experience in AI-enhanced engineering and workflows, utilizing LLM methodologies (e.g., Claude Code, Gemini, or Codex) for automating defensive operations.
- Outstanding leadership skills with a proven track record of mentoring technical teams and managing high-pressure incident scenarios.
- Availability to be contacted outside standard business hours as the escalation point for significant incidents.
Skills Required

Сrypto.com
Website
Сrypto.comCompany size
Not specified
Location
United States
Description
Not specified