Digitial Forensic Incident Responder, Threat Intelligence & Repsonse Division

sggovterp; Singapore; On-site; SGD 90,000 - 130,000; Full time

Job summary

sggovterp in Singapore seeks an experienced cybersecurity professional to lead incident investigations and digital forensics within its Connectivity, Cybersecurity & Resilience Group. You will analyze threats, guide containment, and help improve detection capabilities while communicating findings to diverse stakeholders.

Ideal candidates bring 5+ years in incident response or forensics, relevant GIAC/GCIH-style certs, and hands-on use of major forensic tools.

Qualifications

• Experience in cybersecurity incident investigations or digital forensics.
• Certifications such as GIAC GCFA, GREM, GCFE, or GCIH are valued.
• Proficiency with forensic toolkits and incident response processes.

Responsibilities

• Respond to cybersecurity incidents from containment to closure.
• Conduct root-cause analysis using logs, forensics and malware analysis.
• Develop threat detection rules and signatures for incident platforms.
• Prepare incident reports and brief stakeholders with clear risk and impact insights.
• Update incident response playbooks and stay current with cybersecurity trends.

Skills

Cybersecurity incident investigations

Digital forensics

Analytical mindset

Communication skills

Growth mindset

Threat detection

Education

Background in Information Security, Computer Science, Engineering or equivalent

Tools

Magnet AXIOM

EnCase

X-Ways Forensics

FTK

Autopsy

Job description

What the role is

This role sits within the Connectivity, Cybersecurity & Resilience Group (C2R) Group. C2R strengthens the cybersecurity and resilience posture of the telecommunication and media sectors in Singapore. The Group keeps Singapore's digital connectivity secure, trusted, and robust against an evolving and increasingly complex threat landscape.

What you will be working on

Work with team members to ensure smooth daily operations and tasks prioritisation and collaborate with stakeholders to ensure timely response to cybersecurity incidents from containment till closure.

Investigate cybersecurity incidents to determine root cause, involving log and digital forensic analysis or malware analysis, and assess cybersecurity threats, vulnerabilities and exploits to provide strong technical guidance to investigation and threat assessments.

Recommend preventive actions and mitigations against techniques used in incidents, as well as threat detection rules and signatures (e.g., Snort, Yara, Sigma) against cyber incidents or campaigns.

Prepare and review incident reports to update stakeholders, and present incident briefings including attack techniques and malware behaviours observed, risk, impact, and address enquiries from various stakeholders.

Review and update incident response playbooks, maintain processes, and uphold situational awareness by keeping current with cybersecurity trends, threats, and attacker Tactics, Techniques and Procedures (TTPs).

What we are looking for

• Background in Information Security, Computer Science, Engineering or equivalent
• 5 years or more of related work experience in cybersecurity incident investigations or digital forensics.
• Relevant professional certifications including GIAC GCFA, GREM, GCFE, or GCIH are highly regarded.
• Proficiency in forensic toolkits such as Magnet AXIOM, Encase, X-Ways, FTK, or Autopsy.
• Experience working in a Security Operation Centre (SOC) is advantageous.
• Strong analytical mindset with keen attention to detail, and good communication and interpersonal skills to engage effectively with diverse stakeholders.
• A growth mindset with a willingness to learn and stay ahead of the evolving cybersecurity landscape.