Cybersecurity Lead – Secure-by-Design & Incident Response

HTX (Home Team Science & Technology Agency); Singapore; On-site; SGD 120,000 - 160,000; Full time

Job summary

HTX (Home Team Science & Technology Agency) in Singapore is seeking a security-focused leader to guide project teams on secure-by-design principles and comprehensive cybersecurity strategy. You will work with the CISO to align security with public-safety objectives and drive defense-in-depth across information systems.

You will coordinate incident response efforts with GITSIR and GCSOC, maintain robust security documentation, and stay ahead of evolving threats and regulatory requirements to

Qualifications

• Design, implement and deliver security requirements with a Secure by Design mindset.
• Knowledge of Vulnerability Assessment and Penetration Testing (VAPT) for infrastructure, networks, web apps and APIs.
• Understanding of cloud and AI technologies for private, public and hybrid deployments.
• Familiarity with IoT and OT deployments.

Responsibilities

• Collaborate with the CISO to develop and execute the security strategy.
• Review design, implementation and delivery of security requirements using a Secure by Design approach.
• Assist in orchestrating the incident response plan and advise responders.
• Coordinate with Government IT Security Incident Response (GITSIR) & Government Cyber Security Ops Centre (GCSOC).
• Maintain documentation of security policies, procedures and incident reports.

Skills

Secure by Design

Security strategy

Incident response

VAPT knowledge

Regulatory compliance

Education

Cybersecurity certifications (CISSP/CCSP/CISM/CISA)

Job description

HTX (Home Team Science & Technology Agency) in Singapore is seeking a security-focused leader to guide project teams on secure-by-design principles and comprehensive cybersecurity strategy. You will work with the CISO to align security with public-safety objectives and drive defense-in-depth across information systems.

You will coordinate incident response efforts with GITSIR and GCSOC, maintain robust security documentation, and stay ahead of evolving threats and regulatory requirements to