Full-timeTech & engineering· Posted 2 Jul

Cloud Incident Responder (Vice President)

CitiApply on company site

Salary

Not stated by the company

When

Full-time hours

Where

Singapore

Apply on company site

How well do you match? See it now →

Free with a WorkJio account: we compare your profile with this job and show what you already meet.

Share with a friend

Start: Not stated
Work mode: On-site
Experience: Experienced

About the role

This role sits within Citi's Cloud Incident Response team, where you will take a leading position managing and responding to security incidents across a large, fast-moving technology estate. You will focus on multi-cloud environments on AWS and GCP along with data platforms such as Snowflake and Databricks, working alongside global stakeholders. It suits an experienced security professional who is comfortable operating independently on complex technical analysis.

What you'll do

Architect, refine and champion incident response playbooks and automation capabilities, with a primary focus on Databricks and Snowflake
Perform detailed cloud-focused investigations by analysing logs and telemetry from cloud service providers, data platforms and enterprise SaaS applications

Know someone for this? Share it

WhatsApp Telegram Facebook LinkedIn

Coordinate automated workflows to gather forensic artifacts such as memory, disk and cloud resource configurations for analysis

Oversee the use of cloud-native automation to carry out containment actions across compromised environments, including sensitive data platforms

Conduct advanced host-based and cloud-native analysis to proactively uncover indicators of compromise and adversary tactics, techniques and procedures

Engage with application, infrastructure and business stakeholders to identify key information sources and influence security architecture decisions

Maintain detailed, actionable documentation for every incident, capturing the who, what, when, where, why and how to drive continuous improvement

Participate in threat modelling exercises for new services and capabilities, including purple team, tabletop and CTF exercises

Good to know

Full time position based in Singapore
Hybrid working arrangements may apply

Requirements

6-10 years of relevant experience in cloud security, cybersecurity and/or incident response
Demonstrated hands-on security expertise in major cloud platforms such as AWS and GCP
Proven experience with security constructs and incident response within SaaS/PaaS offerings and data platforms like Snowflake and Databricks
Strong problem-solving capabilities with an in-depth understanding of security incident response processes and proven analytical skills
Experience with log aggregation and security analytics tools such as Splunk, Sentinel or Chronicle
Excellent technical documentation and communication skills

Jio can write this application for you

Jio reads this job and your profile, then writes a short letter in your words. You read it, change anything, and send it yourself. Nothing is sent until you say so.

Apply on the company website

You will leave WorkJio. Never pay a fee or share your Singpass password, OTP or bank log-ins to apply.

Open application

Listed from Citi’s own careers page and not yet verified by WorkJio. You apply on the company’s site. See all their roles.

Is this your company? Roles that show a salary rank higher on WorkJio. Claim or remove this listing

Cloud Incident Responder (Vice President)

About the role

What you'll do

Good to know

Requirements

More jobs like this

Principal AI Engineer

Lead IAM Emerging Identity Security

Research Engineer/Associate, ARL

Senior Research Engineer II, Technology Centre for Offshore and Marine, Singapore

Lead Front-End Engineer 100% - Singapore (f/m/d)

Lead Software Engineer in Test