Senior Detection & Response Engineer (APAC)

About the Position

Senior Detection & Response Engineer (APAC)

Sopra Steria is a leading European technology company specializing in Consulting, Digital Services, and Software. With a global presence and over 51,000 employees, Sopra Steria supports organizations in their digital transformation journey. In the Asia Pacific region, Singapore serves as the regional headquarters for Sopra Steria’s Infrastructure, Cloud, and Cybersecurity services.

We are seeking a Senior Detection & Response Engineer to join our team in the APAC region. This role involves leading technical activities in security incident response and detection, ensuring robust security postures across various layers.

Responsibilities

• Lead technical activities in security use case definition, design, implementation, and enrichment based on real-world attack scenarios and frameworks like MITRE ATT&CK.
• Understand ongoing security threats and propose security use cases to detect and mitigate them.
• Be autonomous in technical activities within the IT Production Security Investigation & Incident Response team and oversee the detection capabilities of the 24/7 regional IT Production SOC.
• Respond to cyber/IT security incidents and evaluate the type and severity of security events.
• Identify recurring security issues and risks, developing mitigation plans and recommending process improvements.
• Partner with global, regional, and local stakeholders to ensure organizational and procedural efficiency and readiness for detecting suspicious events and reacting to them.
• Continuously improve processes to strengthen the current SOC framework via review of policies and operational playbooks.

Contributing Responsibilities

• Partner with the APAC Business CSIRT for integrated security monitoring and alert/incident handling operations.
• Contribute to local security incident response outside the direct scope of responsibilities.
• Contribute to the Bank compliance with regulatory requirements and internal policies.
• Contribute to the reporting of all incidents according to the Incident Management System.
• Contribute to the control frameworks in day-to-day business activities, such as Control Plan.
• Participate in audit interviews and provide the required evidence.

Requirements

Technical Requirements

• Minimum of 7 or more years of experience as a security professional.
• Experience in security use case design/development with understanding of Java language.
• Good working knowledge of Linux (RedHat/Ubuntu).
• Working knowledge to interpret security logs or instructions into threat models. SecOPS-DevOPS mindset & skills.
• Experience and knowledge in investigating incidents, remediation, tracking, and follow-up for incident closure with concerned teams, stakeholders.
• Thorough understanding of technologies and security concepts, with knowledge and hands-on experience in SIEM products and Security Incident Management.
• Experience in incident response activities (threat hunting, event analysis, incident investigation, reporting).
• Comfortable working with and making the most of large data sets (collection, analysis, response), creating content/use cases/models, and bringing an automation mindset.

Personal Attributes

• Strong problem-solving skills.
• Good communication skills (English is a must, French is an added advantage).
• Positive attitude, willing to upskill and carry out in-depth troubleshooting.
• Ability to work autonomously and think on your feet, be proactive.
• Good interpersonal skills and team player.
• High energy level coupled with a desire to take on responsibility.
• Able to multi-task and deliver within agreed deadlines.

Nice to Have

• Experience in SIEM on ELK (Elastic Logstash Kibana) stack is a plus.
• Professional credentials in one of the relevant IT Security disciplines (SANS / CISSP / OSCP) is a plus.
• Experience in common scripting languages such as Python, PowerShell, Bash, SQL is a plus.

We Offer

• Work-life balance: Hybrid working mode and Work-from-Abroad benefits, 18 days of Annual leave.
• Health & insurance: Comprehensive coverage including General Practitioner, hospitalization, dental, and optical.
• Performance incentives: Annual bonus based on individual performance.
• Learning & development: Training programs, certification opportunities, and training incentives to support career growth.
• Team culture: Regular team-building activities and social events.

About the Company

Sopra Steria is a listed European technology leader specializing in Consulting, Digital Services, and Software. With over 51,000 employees worldwide across Europe, North America, and Asia, the Group supports organizations in driving their digital transformation and delivering sustainable business value.

In Asia Pacific, Singapore serves as the regional headquarters for Sopra Steria’s Infrastructure, Cloud, and Cybersecurity services.