Cyber Threat Hunter, Advanced Cybersecurity Division

Info-communications Media Development Authority; Singapore; On-site; SGD 90,000 - 170,000; Full time

Job summary

Info-communications Media Development Authority (IMDA) is seeking a Cyber Threat Hunter to strengthen Singapore's digital infrastructure. You will design and run threat hunting programmes, analyze logs and forensics, and collaborate with security teams to drive timely remediation.

The role requires hands-on information security experience (3+ years), and GIAC certifications are preferred. You will report to the Advanced Cybersecurity Division lead and work within IMDA's Connectivity,

Qualifications

• Background in Engineering, Computer Science, Information Security or an equivalent discipline.
• Minimum 3 years of hands-on information security experience with threat hunting, digital forensics or incident response.
• GIAC GCFA, GCFR or equivalent forensics/threat analysis certifications.
• Experience in threat hunting and risk assessment in complex enterprise or critical infrastructure environments.
• Strong analytical mindset with attention to detail and passion for uncovering threats.
• Good communication to present technical findings to technical and non-technical audiences.

Responsibilities

• Proactively identify and mitigate cyber threats by designing and executing threat hunting programmes.
• Design and deliver comprehensive Threat Hunting programmes with structured methodologies.
• Perform end-to-end threat hunting including hypothesis development, queries, and reporting.
• Coordinate threat hunts with asset owners and security teams.
• Analyze logs and forensic images to identify indicators of compromise and emerging threats.
• Track evolving threats and adjust hunting capabilities and intelligence posture.
• Participate in cyber security exercises and provide expert risk assessments and mitigation advice.
• Draft reports and present findings to technical teams and senior stakeholders.

Skills

Threat hunting

Digital forensics

Incident response

Information security

Threat intelligence

Education

Engineering / Computer Science / Information Security degree

Job description

What the role is:

This role sits within the Connectivity, Cybersecurity & Resilience Group

(C2R) Group. C2R strengthens the cybersecurity and resilience posture of

the telecommunication and media sectors in Singapore.

The Group keeps Singapore’s digital connectivity secure,

trusted, and robust against an evolving and increasingly

complex threat landscape.

What you will be working on:

• Proactively identify and mitigate cyber threats to Singapore's digital infrastructure by designing and executing structured threat hunting programmes, reporting to the Advanced Cybersecurity Division lead and collaborating closely with asset owners and security teams across IMDA.
• Design and deliver comprehensive Cyber Threat Hunting programmes, establishing structured methodologies and frameworks to proactively surface hidden threats across Singapore's digital infrastructure.
• Perform end-to-end threat hunting activities, including hypothesis creation, development of targeted search queries, and detailed reporting of findings to drive timely and effective remediation.
• Manage and coordinate threat hunts with asset owners and security teams, ensuring hunts are conducted in a structured, collaborative and operationally responsible manner.
• Analyse system and network logs as well as forensic images to identify indicators of compromise, anomalous behaviours and emerging threat patterns that may pose risks to the organisation.
• Proactively track evolving cyber threats, threat actor profiles and emerging attack techniques to continuously update and enhance the organisation's threat hunting capabilities and intelligence posture.
• Participate in cyber security exercises and provide expert cybersecurity advice on threat vectors, risk assessments and mitigation measures to strengthen organisational cyber resilience.
• Draft comprehensive reports and present findings, threat assessments and actionable recommendations clearly to both technical teams and senior stakeholders.

What we are looking for:

• Background in Engineering, Computer Science, Information Security or an equivalent discipline.
• Minimum 3 years of hands-on work experience in information security, with demonstrated exposure to threat hunting, digital forensics or incident response functions.
• Possession of relevant GIAC certifications such as GCFA, GCFR or equivalent industry-recognised certifications in forensics and threat analysis.
• Relevant experience in threat hunting and risk assessment would be a distinct advantage, particularly in complex enterprise or critical infrastructure environments.
• Strong analytical mindset with keen attention to detail, and a passion for uncovering hidden threats and solving complex cybersecurity challenges.
• Good communication and interpersonal skills, with the ability to present technical findings and threat intelligence clearly to both technical and non-technical audiences.

About Info-communications Media Development Authority

Info-communications Media Development Authority (www.imda.gov.sg) offers a rewarding career that gives you a front seat in the fast-changing infocomm media sector, where technology and content are shaping the way people view the world more than ever.We offer a wide range of opportunities, where talented individuals and teams can make a difference. Whether you are developing a telecommunications policy affecting consumers or spearheading a scheme to nurture budding media talents, each member of IMDA contributes towards driving innovation, enhancing productivity for economic growth, and improving the quality of life for all Singaporeans.As a statutory board in the Ministry of Communications and Information, IMDA promotes and regulates the infocomm and media sectors.