Cyber Threat Hunter

IMDA; Singapore; On-site; SGD 90,000 - 140,000; Full time

Job summary

IMDA in Singapore seeks a cybersecurity professional to lead threat hunting initiatives, advise on risk and resilience, and coordinate with technical and leadership teams. You will design end‑to‑end hunting programmes, analyze forensic data, and publish clear threat intelligence and remediation guidance.

Minimum 3 years in information security with hands-on threat hunting or incident response experience. GIAC GCFA/GCFR credentials are preferred.

Qualifications

• 3+ years in information security with threat hunting or forensics exposure.
• Experience in risk assessment for complex environments is a plus.
• Certifications in forensics or threat analysis are desirable.

Responsibilities

• Proactively identify and mitigate cyber threats to Singapore's digital infrastructure.
• Design and deliver structured threat hunting programmes and methodologies.
• Perform end-to-end threat hunting, including hypothesis creation and reporting.
• Coordinate hunts with asset owners and security teams in a structured manner.
• Analyze logs and forensic data to identify indicators of compromise.
• Track evolving threats and adapt threat hunting capabilities accordingly.
• Participate in cyber security exercises and provide expert advice.
• Draft reports presenting findings and actionable recommendations to stakeholders.

Skills

Threat hunting

Digital forensics

Incident response

Analytical mindset

Communication skills

Education

Engineering

Computer Science

Information Security

Tools

GCFA

GCFR

Job description

What the role is

This role sits within the Connectivity, Cybersecurity & Resilience Group (C2R) Group. C2R strengthens the cybersecurity and resilience posture of the telecommunication and media sectors in Singapore. The Group keeps Singapore’s digital connectivity secure, trusted, and robust against an evolving and increasingly complex threat landscape.

What you will be working on

• Proactively identify and mitigate cyber threats to Singapore's digital infrastructure by designing and executing structured threat hunting programmes, reporting to the Advanced Cybersecurity Division lead and collaborating closely with asset owners and security teams across IMDA.
• Design and deliver comprehensive Cyber Threat Hunting programmes, establishing structured methodologies and frameworks to proactively surface hidden threats across Singapore's digital infrastructure.
• Perform end-to-end threat hunting activities, including hypothesis creation, development of targeted search queries, and detailed reporting of findings to drive timely and effective remediation.
• Manage and coordinate threat hunts with asset owners and security teams, ensuring hunts are conducted in a structured, collaborative and operationally responsible manner.
• Analyse system and network logs as well as forensic images to identify indicators of compromise, anomalous behaviours and emerging threat patterns that may pose risks to the organisation.
• Proactively track evolving cyber threats, threat actor profiles and emerging attack techniques to continuously update and enhance the organisation's threat hunting capabilities and intelligence posture.
• Participate in cyber security exercises and provide expert cybersecurity advice on threat vectors, risk assessments and mitigation measures to strengthen organisational cyber resilience.
• Draft comprehensive reports and present findings, threat assessments and actionable recommendations clearly to both technical teams and senior stakeholders.

What we are looking for

• Background in Engineering, Computer Science, Information Security or an equivalent discipline.
• Minimum 3 years of hands‑on work experience in information security, with demonstrated exposure to threat hunting, digital forensics or incident response functions.
• Possession of relevant GIAC certifications such as GCFA, GCFR or equivalent industry‑recognised certifications in forensics and threat analysis.
• Relevant experience in threat hunting and risk assessment would be a distinct advantage, particularly in complex enterprise or critical infrastructure environments.
• Strong analytical mindset with keen attention to detail, and a passion for uncovering hidden threats and solving complex cybersecurity challenges.
• Good communication and interpersonal skills, with the ability to present technical findings and threat intelligence clearly to both technical and non‑technical audiences.