Senior Manager/ Manager, SOC Ops Management, HTSC Operations

The job holder will oversee the daily operations in the Security Ops Centre – HTSC (SOC), conduct investigation of cybersecurity events, analyse cyber threat intelligence, perform incident response and after-action reviews of incidents.

He/She is responsible for the following: Managing SOC operations • Assist Head (Ops Management) in managing both Tiers 1 and 2 analysts in HTSC (SOC), in matters of manpower, training and operation issues. • Develop a threat management programme for HTSC (SOC), which may include trials with analytics tools, collaboration with other HTX teams on proof-of-concept projects, processing cyber-intel reports from OSINT and Government sources, etc. • Collaborate with Government agencies to ensure that HTSC (SOC)’s capabilities are closely mapped and quick sharing of information to prevent potential incidents • Review existing monitoring rules to respond to evolving cyber threats. • Review SOP documents to ensure the effective and efficient monitoring operations of the SOC. • Routine reporting of incident status and updates are given to Senior Management • Any other tasks assigned that are related to ensuring the smooth operations of the HTSC (SOC). Incident Response and Management • Take charge of incidents or suspected incidents reported by MHA’s Home Team Departments (HTD) and work towards establishing the confidentiality, integrity and availability of information systems and data in MHA. • Coordinate with the HTDs’ Security Incident Response Officers (SIROs) • Perform incident triage, remediation and threat management activities • Collaborate with other government cyber incident response entities e.g., National Cyber Security Centre (NCSC), Government IT Security Incident Response (GITSIR) & Government Cyber Security Ops Centre (GCSOC) to ensure proper incident closure • Timely reporting of incidents and follow-up actions to both internal and external stakeholders. • Consolidate and review the Incident Reports, as well as After-Action Review (AARs) of the incidents. • Review and update the MHA Security Incident Response Plan (SIRP) and incident response framework, in consultation with various cybersecurity stakeholders across HTDs.

• Tertiary qualification in Computer Science, Electronics Engineering or IT equivalent. • Cybersecurity-related certifications such as CEH, GSEC, GCIH, CISSP are preferred. • Familiar with Security Operations Centre (SOC) operations • Strong effective communications skills. • Good time management and organizational skills. • Strong troubleshooting and problem-solving skills. • A team player with the ability to work autonomously. All new hires are appointed on a two-year contract in the first instance and will be assessed and considered for permanent tenure over time, based on performance. As part of the shortlisting process for this role, you may be required to complete a medical declaration and/or undergo further assessment. All applicants will be updated on the status of their applications within 4 weeks upon closing of the advertisement. #L1-FL1