Assistant Director, Cyber Threat Detection & Automation

Ministry of Defence of Singapore; Singapore; On-site; SGD 120,000 - 180,000; Full time

Job summary

Ministry of Defence of Singapore seeks a cybersecurity professional to design and maintain high‑fidelity detections, leveraging SIEM, EDR, and NDR tools. You will automate workflows, validate detection logic, and adapt to evolving attacker techniques in a fast-paced environment.

The role requires strong coding skills, MITRE ATT&CK knowledge, and clear communication to collaborate with threat intel and security teams across the organization.

Qualifications

• Education in Cybersecurity, Computer Science, Information Security, or a related field.
• 6+ years of IT or cyber operations experience.
• Familiarity with MITRE ATT&CK techniques and procedures.
• Relevant certifications are an asset.
• Experience with coding or scripting is a plus.
• Strong communication and documentation skills.

Responsibilities

• Collaborate with threat intel and cyber security teams to craft detections based on real-world activity.
• Develop and maintain detections across SIEM, EDR, and NDR environments.
• Automate repetitive tasks with code or scripts and orchestrate workflows.
• Peer-review detection logic, document assumptions, validate outcomes, and ensure repeatable processes.
• Apply software engineering discipline to detection content, including version control and unit testing.
• Validate detection codes without relying on live incidents and adapt to evolving attackers.
• Develop and maintain detections for diverse network infrastructures.

Skills

MITRE ATT&CK

Scripting languages

Cybersecurity knowledge

Communication

Independent work

Education

Degree in Cybersecurity/Computer Science/InfoSec

Tools

SIEM

EDR

NDR

Job description

Ministry of Defence of Singapore seeks a cybersecurity professional to design and maintain high‑fidelity detections, leveraging SIEM, EDR, and NDR tools. You will automate workflows, validate detection logic, and adapt to evolving attacker techniques in a fast-paced environment.

The role requires strong coding skills, MITRE ATT&CK knowledge, and clear communication to collaborate with threat intel and security teams across the organization.