Assistant Director (Cyber Engineering) - DIS

Ministry of Defence of Singapore; Singapore; On-site; SGD 120,000 - 180,000; Full time

Job summary

Ministry of Defence of Singapore seeks a cybersecurity professional to design and maintain high‑fidelity detections, leveraging SIEM, EDR, and NDR tools. You will automate workflows, validate detection logic, and adapt to evolving attacker techniques in a fast-paced environment.

The role requires strong coding skills, MITRE ATT&CK knowledge, and clear communication to collaborate with threat intel and security teams across the organization.

Qualifications

• Education in Cybersecurity, Computer Science, Information Security, or a related field.
• 6+ years of IT or cyber operations experience.
• Familiarity with MITRE ATT&CK techniques and procedures.
• Relevant certifications are an asset.
• Experience with coding or scripting is a plus.
• Strong communication and documentation skills.

Responsibilities

• Collaborate with threat intel and cyber security teams to craft detections based on real-world activity.
• Develop and maintain detections across SIEM, EDR, and NDR environments.
• Automate repetitive tasks with code or scripts and orchestrate workflows.
• Peer-review detection logic, document assumptions, validate outcomes, and ensure repeatable processes.
• Apply software engineering discipline to detection content, including version control and unit testing.
• Validate detection codes without relying on live incidents and adapt to evolving attackers.
• Develop and maintain detections for diverse network infrastructures.

Skills

MITRE ATT&CK

Scripting languages

Cybersecurity knowledge

Communication

Independent work

Education

Degree in Cybersecurity/Computer Science/InfoSec

Tools

SIEM

EDR

NDR

Job description

What The Role Is

You play a critical role in developing and maintaining advanced cybersecurity capabilities by sharpening the ability to detect, investigate, and respond to cyber threats by engineering tools, processes, and automation that enable scalable, efficient security operations.

What You Will Be Working On

• Collaborate with threat intelligence and cyber security teams to craft and refine detections based on real-world threat activity
• Develop and maintain high-fidelity detection methods across Security Info and Event Management (SIEM), Endpoint Detection and Response (EDR) and NDR (Network Detection and Response)
• Recognise repeating tasks, design and develop code/script to automate and orchestrate workflows
• Document and conduct peer-review of detection logic, assumptions, expected outcomes and validation methods to ensure rigorous and repeatable process
• Challenge(s)
• Applying strong software engineering discipline into detection content, which requires practices such as version control, peer reviews, unit testing and automation
• Validating detection codes without relying on live incidents
• Adapting to constantly evolving attackers, requiring regular review and updates of detection methods
• Developing and maintaining detection methods for diverse network infrastructure environments

What We Are Looking For

• Education in Cybersecurity, Computer Science, Information Security, or a related field
• At least 6 years of working experiences in IT or cyber environment
• Good understanding of MITRE ATT&CK TTPs
• Related professional qualifications/certifications is advantageous
• Experience with coding/scripting languages is advantageous
• Strong communication and documentation skills
• Ability to work independently in a fast-paced environment
• Collaborative spirit for cross-functional team engagement
• Only shortlisted candidates will be notified.