Cyber Threat Intelligence Manager

Eames Consulting; Singapore; On-site; SGD 140,000 - 190,000; Full time

Job summary

Eames Consulting is seeking a Cyber Threat Intelligence Manager for a leading financial services organisation in Singapore. You will lead the threat intelligence capability and support incident response across the business.

This role requires deep hands-on experience with EDR, SIEM and TIP tooling, and the ability to guide the function from concept to operation, while mentoring junior analysts and collaborating with cross-functional teams.

Qualifications

• 8+ years in cybersecurity, ideally including exposure to a regulated environment such as financial services, banking or insurance.
• Experience applying security frameworks in daily analysis (MITRE ATT&CK, Cyber Kill Chain).
• Ability to build and mature threat intel capabilities from scratch.

Responsibilities

• Sit at the centre of incident response for the business, guiding responses through to resolution.
• Build relationships with peers and external intelligence partners to enable two-way intel flow.
• Own threat intelligence frameworks, playbooks and products used by the team.
• Maintain a live view of threat actors and techniques relevant to financial services.
• Coach and grow junior analysts as part of day-to-day responsibilities.

Skills

Threat intel

Incident response

MITRE ATT&CK

EDR

SIEM

TIP tooling

Leadership

Education

Bachelor in Information Security / Computer Science

Tools

SIEM

EDR

TIP tooling

Job description

A leading financial services organisation is growing out its cyber security function and is looking for a Cyber Threat Intelligence Manager to lead its threat intelligence capability and support incident response across the business.

What you'll do

• Sit at the centre of incident response for the business, stepping in as the senior technical voice when a security event escalates and guiding the response through to resolution
• Build relationships with peers across the security function and with external intelligence-sharing partners, so intelligence flows both ways
• Take ownership of how threat intelligence work gets done: the frameworks, the playbooks, the products the rest of the team relies on
• Keep a live picture of the threat actors and attack techniques most relevant to financial services, and turn that picture into guidance people can actually act on
• Coach and grow more junior analysts as part of the day-to-day, not as a separate responsibility bolted on

What you'll bring

• Deep hands-on expertise across EDR, SIEM and TIP tooling, with the technical grounding to apply frameworks like MITRE ATT&CK, the Cyber Kill Chain or the Diamond Model in day-to-day analysis
• Comfortable owning incidents end-to-end: from initial triage through to advising the business on containment and recovery
• A minimum of eight years in cybersecurity, ideally including exposure to a regulated environment such as financial services, banking or insurance
• Confident building capability from scratch: standing up frameworks, playbooks or a function where maturity is still developing
• A degree in information security, computer science or a related discipline; CISSP, GCTI or GREM would be well regarded but aren't essential

This is an opportunity to shape a growing function and have direct influence on how a major financial institution defends against evolving threats.