Cyber Threat Hunter

Public Service Division; Singapore; On-site; SGD 120,000 - 180,000; Full time

Job summary

Public Service Division is seeking a Threat Hunting Specialist to safeguard Singapore’s digital infrastructure. You will design and execute threat hunting programmes, analyze logs and forensics data, and work with security teams to drive timely remediation.

The role requires 3+ years in information security with threat hunting or incident response exposure, and GIAC certifications such as GCFA/GCFR. Strong communication and analytic skills are essential.

Qualifications

• Minimum 3 years of hands-on information security work, with threat hunting, forensics or incident response exposure.
• GIAC GCFA/GCFR or equivalent certifications.
• Experience in threat hunting and risk assessment is a plus, especially in complex enterprise or critical infrastructure.

Responsibilities

• Proactively identify and mitigate cyber threats by designing and running threat hunting programmes.
• Deliver structured threat hunting methodologies and frameworks.
• Perform end-to-end threat hunts including hypothesis, queries, and reporting for remediation.
• Coordinate hunts with asset owners and security teams to ensure structured execution.
• Analyze logs and forensic images to detect indicators of compromise and emerging threats.
• Track evolving threats and update threat intelligence postures.
• Participate in cyber exercises and provide expert threat guidance to stakeholders.
• Draft reports and present findings and actionable recommendations.

Skills

Threat Hunting

Digital Forensics

Incident Response

Analytical Mindset

Communication

GCFA/GCFR

Education

Engineering / Computer Science / Information Security background

Job description

[What the role is]

Keeping the Infocomm and Media sectors secure and resilient through policies, regulations and technical capabilities.
The Advanced Cybersecurity Division is at the forefront of safeguarding Singapore’s digital economy. Singapore’s economy is digitalising, and an effective wireless communications infrastructure is key to support Singapore’s digital economy. As a member of the Advanced Cybersecurity Division, you will be applying your expertise in Cybersecurity to support various operational and developmental activities, with strong focus on emerging technologies such as 5G and Cloud. The Threat Hunting Specialist plays a pivotal role in proactively detecting and neutralising cyber threats before they materialise, working alongside a team of cybersecurity professionals to strengthen the resilience of Singapore’s critical digital infrastructure.

[What you will be working on]

• Proactively identify and mitigate cyber threats to Singapore’s digital infrastructure by designing and executing structured threat hunting programmes, reporting to the Advanced Cybersecurity Division lead and collaborating closely with asset owners and security teams across IMDA.
• Design and deliver comprehensive Cyber Threat Hunting programmes, establishing structured methodologies and frameworks to proactively surface hidden threats across Singapore’s digital infrastructure.
• Perform end-to-end threat hunting activities, including hypothesis creation, development of targeted search queries, and detailed reporting of findings to drive timely and effective remediation.
• Manage and coordinate threat hunts with asset owners and security teams, ensuring hunts are conducted in a structured, collaborative and operationally responsible manner.
• Analyse system and network logs as well as forensic images to identify indicators of compromise, anomalous behaviours and emerging threat patterns that may pose risks to the organisation.
• Proactively track evolving cyber threats, threat actor profiles and emerging attack techniques to continuously update and enhance the organisation’s threat hunting capabilities and intelligence posture.
• Participate in cyber security exercises and provide expert cybersecurity advice on threat vectors, risk assessments and mitigation measures to strengthen organisational cyber resilience.
• Draft comprehensive reports and present findings, threat assessments and actionable recommendations clearly to both technical teams and senior stakeholders.

[What we are looking for]

• Background in Engineering, Computer Science, Information Security or an equivalent discipline.
• Minimum 3 years of hands-on work experience in information security, with demonstrated exposure to threat hunting, digital forensics or incident response functions.
• Possession of relevant GIAC certifications such as GCFA, GCFR or equivalent industry-recognised certifications in forensics and threat analysis.
• Relevant experience in threat hunting and risk assessment would be a distinct advantage, particularly in complex enterprise or critical infrastructure environments.
• Strong analytical mindset with keen attention to detail, and a passion for uncovering hidden threats and solving complex cybersecurity challenges.
• Good communication and interpersonal skills, with the ability to present technical findings and threat intelligence clearly to both technical and non-technical audiences.