Cyber Threat Intelligence Analyst: Elevate Defenses

Changi Airport Group; Singapore; Sur place; SGD 70 000 - 110 000; Plein temps

Résumé du poste

Changi Airport Group in Singapore is seeking a Cyber Threat Intelligence Analyst to deliver timely, relevant intelligence that strengthens the organisation’s cyber defence. You will produce threat and vulnerability intelligence and support wider cyber operations such as threat hunting and incident investigations.

The role requires developing intelligence requirements, analysing indicators, and translating findings into actionable recommendations for monitoring and risk reduction, while

Qualifications

• Degree with 1-3 years of experience in cyber threat intelligence, security operations or a related cyber security role.
• Active interest in, and up-to-date awareness of, the evolving cyber threat landscape.
• Working knowledge of cyber threat intelligence concepts, including indicators of compromise, the MITRE ATT&CK framework, tactics, techniques and procedures, and the intelligence lifecycle.
• Familiarity with the Structured Threat Information Expression and Trusted Automated eXchange of Indicator Information standards, Sigma rules, or Yet Another Recursive Acronym rules.
• Strong analytical judgement, attention to detail and written communication skills.
• Ability to communicate clear, evidence-based recommendations to both technical and non-technical audience

Responsabilités

• Define and maintain intelligence requirements and collection plans in line with organisational priorities.
• Gather, validate and analyse threat intelligence from approved internal, open-source, commercial and managed-service sources.
• Assess threat actors, campaigns, vulnerabilities, indicators, and tactics, techniques, and procedures relevant to the organisation.
• Produce vulnerability intelligence by assessing emerging vulnerabilities, exploit trends and threat actor activity, and translating them into actionable recommendations for prioritisation, monitoring and risk reduction.
• Prepare and disseminate clear intelligence products, including threat advisories, vulnerability briefs, campaign summaries, threat profiles and landscape briefings.
• Translate intelligence into operational outcomes, including detection use cases, monitoring recommendations and control improvement opportunities.
• Work closely with Security Operations, Digital Forensics, Incident Management and Vulnerability Management teams to ensure intelligence supports day-to-day cyber defence activities.
• Support broader cyber operations work beyond CTI, such as threat hunts, investigations, forensic support and intrusion analysis when operational needs arise.
• May be activated outside normal working hours on an occasional basis to support significant cyber security incidents, emerging threats or other time-critical cyber operations
• Coordinate with the CTI managed security service provider to ensure that external cyber threat intelligence and digital risk protection outputs are relevant, of good quality, and meet the expectations of internal stakeholders.
• Administer the threat intelligence platform, including threat feeds, enrichment, tagging and workflow configuration.
• Maintain threat profiles, operating procedures, knowledge bases and service metrics that support consistent intelligence delivery.
• Improve CTI processes, tools and stakeholder engagement to increase the quality, relevance and impact of intelligence outputs.

Connaissances

Threat intel concepts

MITRE ATT&CK

Analytical thinking

Written communication

Threat hunting

Incident response

Formation

Bachelor's degree

Description du poste

Changi Airport Group in Singapore is seeking a Cyber Threat Intelligence Analyst to deliver timely, relevant intelligence that strengthens the organisation’s cyber defence. You will produce threat and vulnerability intelligence and support wider cyber operations such as threat hunting and incident investigations.

The role requires developing intelligence requirements, analysing indicators, and translating findings into actionable recommendations for monitoring and risk reduction, while