Assistant Director, Cyber Threat Detection & Automation

MINDEF; Singapore; On-site; SGD 120,000 - 180,000; Full time

Job summary

MINDEF in Singapore seeks a seasoned cybersecurity engineer to develop and maintain advanced detection capabilities, enabling scalable security operations across SIEM, EDR and NDR. You will craft detections based on real-world threat activity and work with cyber teams to sharpen defenses.

Responsibilities include automating workflows, documenting and peer-reviewing detection logic, applying version control, testing, and updating detection methods as threats evolve in diverse network environments.

Qualifications

• Educated in Cybersecurity, CS, InfoSec or related field
• At least 6 years in IT or cyber environment
• Knowledge of MITRE ATT&CK TTPs highly beneficial
• Certifications are advantageous
• Coding/scripting experience is a plus
• Strong communication and documentation skills
• Ability to work independently in a fast-paced setting

Responsibilities

• Collaborate with threat intel and cybersecurity teams to refine detections
• Develop and maintain high-fidelity detections across SIEM, EDR, NDR
• Design and automate workflows to reduce manual tasks
• Peer-review detection logic, assumptions, outcomes and validation methods
• Apply software engineering discipline: version control, testing and automation
• Adapt detection methods to evolving attackers and environments

Skills

MITRE ATT&CK knowledge

Coding/scripting

Strong communication

Independent work

Threat detection

Education

Bachelor's degree in Cybersecurity/CS/InfoSec

Tools

SIEM

EDR

NDR

Job description

MINDEF in Singapore seeks a seasoned cybersecurity engineer to develop and maintain advanced detection capabilities, enabling scalable security operations across SIEM, EDR and NDR. You will craft detections based on real-world threat activity and work with cyber teams to sharpen defenses.

Responsibilities include automating workflows, documenting and peer-reviewing detection logic, applying version control, testing, and updating detection methods as threats evolve in diverse network environments.