Digital Forensics Incident Responder, Threat Intelligence & Response Division

Info-communications Media Development Authority; Singapore; On-site; SGD 90,000 - 130,000; Full time

Job summary

Info-communications Media Development Authority (IMDA) in Singapore seeks a cybersecurity professional to join the Connectivity, Cybersecurity & Resilience Group. You will investigate incidents, determine root causes, and provide technical guidance to threat assessments.

You will prepare incident reports, update playbooks, and communicate with stakeholders while staying current with cyber threat trends and TTPs. A 5+ year background and relevant certifications are preferred.

Qualifications

• Minimum 5 years of experience in cybersecurity incident investigations or digital forensics.
• Background in Information Security, Computer Science, Engineering or equivalent.
• Certifications GCFA/GCFE/GCIH/GREM are highly regarded.
• Experience working in a Security Operations Centre (SOC) is advantageous.

Responsibilities

• Collaborate with team members to ensure smooth daily operations and task prioritisation.
• Respond to cybersecurity incidents from containment to closure with stakeholders.
• Investigate incidents to determine root cause using log, digital forensics or malware analysis.
• Advise on preventive actions, mitigate techniques, and threat detection rules.
• Prepare and review incident reports and present briefings on attack techniques and malware behaviours.

Skills

Information security

Cybersecurity incident investigations

Digital forensics

SOC experience

Analytical thinking

Communication skills

Growth mindset

Education

Information Security / CS / Engineering degree

Tools

Magnet AXIOM

Encase

X-Ways

FTK

Autopsy

Job description

What the role is:

This role sits within the Connectivity, Cybersecurity & Resilience Group (C2R) Group. C2R strengthens the cybersecurity and resilience posture of the telecommunication and media sectors in Singapore.

The Group keeps Singapore’s digital connectivity secure, trusted, and robust against an evolving and increasingly complex threat landscape.

What you will be working on:

• Work with team members to ensure smooth daily operations and tasks prioritisation and collaborate with stakeholders to ensure timely response to cybersecurity incidents from containment till closure.
• Investigate cybersecurity incidents to determine root cause, involving log and digital forensic analysis or malware analysis, and assess cybersecurity threats, vulnerabilities and exploits to provide strong technical guidance to investigation and threat assessments.
• Recommend preventive actions and mitigations against techniques used in incidents, as well as threat detection rules and signatures (e.g., Snort, Yara, Sigma) against cyber incidents or campaigns.
• Prepare and review incident reports to update stakeholders, and present incident briefings including attack techniques and malware behaviours observed, risk, impact, and address enquiries from various stakeholders.
• Review and update incident response playbooks, maintain processes, and uphold situational awareness by keeping current with cybersecurity trends, threats, and attacker Tactics, Techniques and Procedures (TTPs).

What we are looking for:

• Background in Information Security, Computer Science, Engineering or equivalent
• 5 years or more of related work experience in cybersecurity incident investigations or digital forensics.
• Relevant professional certifications including GIAC GCFA, GREM, GCFE, or GCIH are highly regarded.
• Proficiency in forensic toolkits such as Magnet AXIOM, Encase, X-Ways, FTK, or Autopsy.
• Experience working in a Security Operation Centre (SOC) is advantageous.
• Strong analytical mindset with keen attention to detail, and good communication and interpersonal skills to engage effectively with diverse stakeholders.
• A growth mindset with a willingness to learn and stay ahead of the evolving cybersecurity landscape.

About Info-communications Media Development Authority

Info-communications Media Development Authority (www.imda.gov.sg) offers a rewarding career that gives you a front seat in the fast-changing infocomm media sector, where technology and content are shaping the way people view the world more than ever. We offer a wide range of opportunities, where talented individuals and teams can make a difference. Whether you are developing a telecommunications policy affecting consumers or spearheading a scheme to nurture budding media talents, each member of IMDA contributes towards driving innovation, enhancing productivity for economic growth, and improving the quality of life for all Singaporeans. As a statutory board in the Ministry of Communications and Information, IMDA promotes and regulates the infocomm and media sectors.