Digitial Forensic Incident Responder, Threat Intelligence & Repsonse Division

Government Technology Agency (GovTech); Singapore; On-site; SGD 90,000 - 150,000; Full time

Job summary

Government Technology Agency (GovTech) in Singapore is seeking an experienced cybersecurity incident investigator to join the Connectivity, Cybersecurity & Resilience Group. You will work on containment through closure, perform root-cause analysis and provide technical guidance to threat assessments.

The role emphasizes incident response playbooks, collaboration with stakeholders, and staying current with trends and TTPs to strengthen public sector resilience.

Qualifications

• 5+ years of experience in cybersecurity incident investigations or digital forensics.
• GIAC GCFA, GREM, GCFE, or GCIH certifications highly regarded.
• Proficient with forensic toolkits such as Magnet AXIOM, Encase, X-Ways, FTK, or Autopsy.

Responsibilities

• Investigate cybersecurity incidents to determine root cause, including log and digital forensics analysis or malware analysis.
• Assess threats, vulnerabilities and exploits to provide technical guidance for investigations and threat assessments.
• Recommend preventive actions and mitigations and contribute to detection rules and signatures (e.g., Snort, Yara, Sigma).
• Prepare and review incident reports, update stakeholders, and present incident briefings with details on techniques and malware behaviours.

Skills

Information Security

Certifications

Forensic tools

SOC experience

Analytical mindset

Growth mindset

Tools

Magnet AXIOM

Encase

X-Ways

FTK

Autopsy

Job description

What the role is

This role sits within the Connectivity, Cybersecurity & Resilience Group (C2R) Group. C2R strengthens the cybersecurity and resilience posture of the telecommunication and media sectors in Singapore. The Group keeps Singapore's digital connectivity secure, trusted, and robust against an evolving and increasingly complex threat landscape.

What you will be working on

Work with team members to ensure smooth daily operations and tasks prioritisation and collaborate with stakeholders to ensure timely response to cybersecurity incidents from containment till closure. Investigate cybersecurity incidents to determine root cause, involving log and digital forensic analysis or malware analysis, and assess cybersecurity threats, vulnerabilities and exploits to provide strong technical guidance to investigation and threat assessments. Recommend preventive actions and mitigations against techniques used in incidents, as well as threat detection rules and signatures (e.g., Snort, Yara, Sigma) against cyber incidents or campaigns. Prepare and review incident reports to update stakeholders, and present incident briefings including attack techniques and malware behaviours observed, risk, impact, and address enquiries from various stakeholders. Review and update incident response playbooks, maintain processes, and uphold situational awareness by keeping current with cybersecurity trends, threats, and attacker Tactics, Techniques and Procedures (TTPs).

What we are looking for

• Background in Information Security, Computer Science, Engineering or equivalent 5 years or more of related work experience in cybersecurity incident investigations or digital forensics.
• Relevant professional certifications including GIAC GCFA, GREM, GCFE, or GCIH are highly regarded.
• Proficiency in forensic toolkits such as Magnet AXIOM, Encase, X-Ways, FTK, or Autopsy.
• Experience working in a Security Operation Centre (SOC) is advantageous.
• Strong analytical mindset with keen attention to detail, and good communication and interpersonal skills to engage effectively with diverse stakeholders.
• A growth mindset with a willingness to learn and stay ahead of the evolving cybersecurity landscape.

The Singapore Public Service plays a key role in the economic growth, progress and stability of Singapore by formulating and implementing government policies, as well as providing key public services. Whether you are a fresh graduate joining the workforce or an experienced professional, the Singapore Public Service offers a great variety of job opportunities for you. The work in the Public Service can be broadly categorised into the following sectors: Economic, Social, Security & External Relations, and Administration & Corporate Development. Be part of the team that shapes the future of Singapore.