Assistant Director, SingCERT (Singapore Computer Emergency Response Team)

Cyber Security Agency of Singapore (CSA); Singapore; On-site; SGD 180,000 - 230,000; Full time

Job summary

SingCERT, the national CERT of Singapore, seeks an Assistant Director to lead a cybersecurity incident response team, guiding detection, assessment and rapid response to threats impacting businesses and the public.

You will set strategic direction, liaise with SOCs, CERTs, law enforcement and leadership, and represent Singapore in regional and international engagements. Training and upskilling opportunities are available.

Qualifications

• Bachelor's degree in computer science, computer engineering, or related field.
• At least 8 years of working experience in IT infrastructure or cybersecurity.
• At least 3 years of supervisory experience in incident response (SOC/CIRT/CSIRT/CERT).
• In-depth knowledge of operating systems, network protocols, security monitoring, log collection and correlation, and forensics.
• Understanding of attacker TTPs and end-to-end cyber incident management.
• Certifications such as GCFE, GREM, GCIH, GNFA advantageous.

Responsibilities

• Drive SingCERT's operations in investigating and responding to cybersecurity incidents and threats.
• Engage stakeholders across industries and agencies during incident handling and remediation.
• Shape and coordinate public and crisis communications during major cyber incidents.
• Identify and drive improvements in processes and tools to enhance operational effectiveness.
• Represent SingCERT in regional and international cybersecurity forums and partnerships.
• Drive thought leadership and contribute to national cyber response policy discussions.

Skills

Incident management

Strategic leadership

Stakeholder engagement

Communication (verbal & written)

Team leadership

Security operations

Education

Bachelor's degree in CS/CE or related

Tools

Forensics

Job description

The SingCERT team is the national CERT of Singapore, looking after the businesses and the members of public in Singapore and deploying incident response teams on-site to conduct investigations and digital forensics . SingCERT supports the detection, resolution and prevention of cybersecurity incidents affecting Singapore's non-CII constituency. Beyond responding to incidents reported by the public and businesses, SingCERT undertakes digital risk monitoring, vulnerability disclosure, cybersecurity alerts and advisories, public education, and technical and engineering work to strengthen cyber resilience. SingCERT also works with regional and international CERT partners through information sharing, technical exchanges, exercises and training. This is more than just a technical role - it's a national mission, a calling.

You will play a pivotal role in keeping Singapore's cyberspace safe and secure, watching out for cybersecurity threats, tailoring advice for constituents to protect themselves, and providing guidance to constituents who have encountered a cybersecurity incident. As Assistant Director of SingCERT (Singapore Computer Emergency Response Team), you will lead a team of cybersecurity professionals to detect, assess, and respond to cyber threats affecting businesses and the public. You'll be setting strategic direction and representing Singapore in multiple local and global cybersecurity engagements. We are looking for a strategic thinker and a highly motivated team player who has demonstrated experience working in incident management roles and developing or deploying mitigation techniques for defending networks. There will be adequate training opportunities to upskill yourself and stay relevant in the cybersecurity field.

Responsibilities:

• Drive SingCERT's operations in investigating and responding to cybersecurity incidents and threats
• Engage stakeholders across industries - including SOCs, CERTs, technical teams, law enforcement, and leadership - during incident handling and remediation
• Shape and coordinate public and crisis communications during major cyber incidents
• Identify and drive improvements in processes and tools to enhance operational effectiveness
• Represent SingCERT in regional and international cybersecurity forums and working groups
• Strengthen ties with the global CERT community through proactive outreach and partnerships
• Drive thought leadership and contribute to policy-level discussions in national cyber response
• Drive innovation by identifying emerging trends, experimenting new ideas and turning viable ideas into scalable outcomes
• Support capacity building through training, exercises, knowledge sharing, and collaboration to strengthen cyber readiness and incident response
• Bachelor's degree in computer science, computer engineering, or related field
• Relevant working experience in IT infrastructure or cybersecurity of at least 8 years
• At least 3 years of supervisory experience in incident response (SOC/CIRT/CSIRT/CERT)
• In-depth knowledge of operating systems, network protocols, security monitoring, log collection, and correlation, network- and host-based forensics
• Understanding of the tactics, techniques, and procedures of cyber attackers, and experience managing cyber incidents end-to‑end
• Experience with investigating common types of cyberattacks, network packet analysis, log analysis, and reviewing security events from detection to resolution
• Experience advising on enterprise‑level cybersecurity strategies or audit frameworks is an advantage
• Certifications such as GCFE, GREM, GCIH, GNFA will be an advantage
• Excellent communication skills, both verbal and written, as well as strong presentation and engagement skills
• Strong stakeholder management skills to work with both partners and stakeholders