{"id":2580714,"url":"https://alion.io/job/newbridge-alliance-lead-security-operations-incident-response","title":"Lead, Security Operations & Incident Response","company":{"id":4423579,"name":"Newbridge Alliance","domain":"newbridgealliance.com","url":"https://alion.io/company/newbridgealliance","size_band":"51-200","is_staffing_agency":true,"employer_type":"agency","is_intermediary":false,"listed_via":null,"ats_vendor":"Manatal","truth_index":null},"role":"Security","role_family":"Security","seniority":"lead","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Singapore"],"countries":["SG"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":56000,"max_usd":130000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":17},"experience_years_min":7,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"GCP","optional":false},{"name":"GDPR","optional":false},{"name":"IAM","optional":false},{"name":"ISO 27001","optional":false},{"name":"NIST CSF","optional":false},{"name":"SIEM","optional":false},{"name":"SOC 2","optional":false},{"name":"Splunk","optional":false},{"name":"MITRE ATT&CK","optional":true},{"name":"PowerShell","optional":true},{"name":"Python","optional":true}],"status":"live","first_seen_at":"2026-10-15T01:52:06Z","employer_posted_date":"2026-10-15","last_verified_at":"2026-10-29T09:20:45Z","board_verified":true,"closed_at":null,"days_open":14,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":14},"description":"You will be accountable for building a resilient, intelligence-led defence operation. This includes leading a team of internal analysts, governing external SOC/MSSP partners, and partnering with technology teams to embed security across cloud, on-premise, and media production environments.\nKey Accountabilities\nA. Security Operations & Team Leadership\nManage, coach and develop a team of 4-5 security analysts; provide direction, prioritization and quality oversight.\nGovern third-party SOC / MSSP relationships - drive SLA adherence, service improvement and value realization.\nOwn the end-to-end SecOps process and drive automation to improve MTTD / MTTR.\nManage budgets, vendor contracts, and evaluation / rollout of new defence tooling.\nB. Threat Detection, Hunting & Response\nTake ownership of real-time monitoring, alert triage and proactive hunting activities to pre-empt threats.\nServe as the senior escalation for critical incidents (SIRM function) - orchestrate containment, eradication, recovery and lessons-learned.\nEngineer and continuously tune detections, correlation logic and hunt playbooks across SIEM and EDR stacks.\nAuthor and regularly exercise IR playbooks, escalation matrices and crisis communication plans; ensure readiness through tabletop exercises.\nC. Intelligence & Cross-Functional Partnership\nOperationalize threat intelligence - ingest, contextualize and apply intel to detection and response.\nKeep abreast of emerging threats, adversary TTPs and threat actor campaigns, particularly those targeting media & content platforms.\nEngage with external intel-sharing forums, regulators, and technology partners to strengthen collective defence.\nWork in lockstep with Cloud, DevOps, IT and Infrastructure teams to ensure security controls (firewall, IDS/IPS, encryption, IAM) are architected and operated effectively.\nD. Governance & Reporting\nReport SecOps performance, risk posture and improvement roadmaps to the CISO and senior leadership through clear metrics and KPIs.\nEnsure operations remain compliant with NIST CSF, ISO 27001, GDPR, SOC 2 and other applicable standards.\nWhat You Bring\n7+ years of progressive experience in Cyber Security, with at least 3 years managing a SecOps / SOC team in an enterprise or hybrid outsourced model.\nDemonstrated success leading complex incident response, crisis management and threat hunting at scale.\nStrong practitioner-level expertise across SIEM (Splunk, Sentinel etc.), SOAR, EDR and TIP.\nSolid grasp of cloud security across AWS / Azure / GCP; experience securing streaming, OTT or content delivery workflows is highly desirable.\nDeep understanding of MITRE ATT&CK and how to operationalize it for detection coverage.\nWorking knowledge of scripting & analytics - Python, PowerShell, KQL, SPL or similar.\nOutstanding leadership, communication and stakeholder influence - able to brief senior executives under pressure.\nIndustry certifications are a plus: CISSP, CISM, GCIH, ECIH, CCSP, AWS Security Specialty, Azure Security Engineer.","description_format":"text","description_chars":3011,"description_truncated":false,"requirements":{"experience_years_min":7,"management_years_min":3,"team_size_min":4,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Incident Response"],"lifecycle":[{"event":"open","at":"2026-10-15T01:52:06Z"}],"visa":[],"liveness":{"score":47,"band":"ok","label":"Likely open","p_open":1,"p_active":0.522,"p_room":0.9,"age_days":14,"expected_fill_days":30,"reasons":["conf:0","agency","velocity","win:mid"],"computed_at":"2026-10-29T05:49:05Z"},"pay":null,"html_url":"https://alion.io/job/newbridge-alliance-lead-security-operations-incident-response","json_url":"https://alion.io/job/newbridge-alliance-lead-security-operations-incident-response.json","meta":{"generated_at":"2026-10-29T12:59:43Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":19564,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-30T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":4423579},"rest":"https://alion.io/mcp/rest/get_company?id=4423579"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fnewbridge-alliance-lead-security-operations-incident-response"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fnewbridge-alliance-lead-security-operations-incident-response"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fnewbridge-alliance-lead-security-operations-incident-response"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/newbridge-alliance-lead-security-operations-incident-response\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fnewbridge-alliance-lead-security-operations-incident-response"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":2580714}},{"tool":"search_jobs","arguments":{"company":"newbridgealliance.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":2580714},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}