DY Head Section (Cloud Monitoring)

Open to Singapore citizens Only

DY Head Section (Cloud Monitoring) - Cyber Defence Group

As the DY Head Section (Cloud Monitoring), you oversee the team’s daily operations involving threat detection and localisation, and incident management in cloud environment. You are also required to supervise the team’s training and development activities, and ensure team adherence to established cyber monitoring and detection SOPs and knowledge management. You will also coordinate with vendors and SAF System managers for SOC-related matters such as systems’ integration, project system trials and security patch management.

What You Will Do

• Assist the Section Head in building the team’s competency and expansion towards the direction of a Security Operation Centre (SOC).


• Interact with external and internal stakeholders for discussion and coordination of system integration, project trials and system enhancements.


• Providing guidance and support during cyber incidents and escalations.


• Coordinate and assist with incident management efforts, including containment, remediation and recovery phases.


• Establish KPIs for SOC’s exercises and subsequently evaluate individual and team competencies and performance during the exercises.


• Review SOPs to ensure alignment with evolving cyber threats and SAF policies.


• Promote a culture of knowledge sharing within the SOC team to enhance collective expertise.


• Formalise the documentation of past incident management cases and lessons learned for knowledge retention.


• Ensure SOC’s tools’ meet baseline requirements and are optimised


• Stay informed about emerging cyber threats and evolving tool capabilities to collaborate with other stakeholders.


• Work with stakeholders to ensure the performance and resource utilisation of the SOC tools.

What You Will Bring

• Education in Cybersecurity, Computer Engineering, Information Systems or an equivalent discipline.


• At least 5 to 8 years of working experience in cybersecurity roles, including a minimum of 2 years in a senior or supervisory roles within a SOC or Cyber Emergency Response Team.


• Possession of relevant technical certification such as: GIAC Security Operations Certified (GSOC), GIAC Certified Incident Handler (GCIH), Certified Information Systems Security Professional (CISSP) and/or Certified Information System Manager (CISM))


• Proficiency in tools such as: Security Information and Event Management, Intrusion Detection System, Intrusion Prevention System, and Endpoint Detection and Response.


• Familiarity with Cloud Monitoring related tools such as SolarWinds, Azure Monitor, AWS Monitoring.

Join us in shaping the future of defence technology. Apply today!