Engineer (Cyber Operations)

MINDEF; Singapore; On-site; SGD 80,000 - 120,000; Full time

Job summary

A governmental defense agency in Singapore seeks a cybersecurity professional to enhance detection, investigation, and response capabilities against threats. Responsibilities include developing high-fidelity detection methods and automating workflows. Candidates must have at least 6 years of experience in IT or cyber environments, a solid understanding of threat frameworks, and strong communication skills. This role offers the opportunity to contribute significantly to national security while collaborating in a fast-paced environment.

Qualifications

• At least 6 years of working experience in IT or cyber environment.
• Good understanding of MITRE ATT&CK TTPs.
• Experience with coding/scripting languages is advantageous.

Responsibilities

• Develop and maintain high‑fidelity detection methods across various platforms.
• Document and conduct peer-reviews of detection logic.
• Recognize tasks and automate workflows.

Skills

Collaboration with threat intelligence teams

Development of detection methods

Automation of workflows

Strong communication skills

Documentation skills

Peer review practices

Education

Education in Cybersecurity, Computer Science, Information Security

Job description

What the role is:

You play a critical role in developing and maintaining advanced cybersecurity capabilities by sharpening the ability to detect, investigate, and respond to cyber threats by engineering tools, processes, and automation that enable scalable, efficient security operations.

What you will be working on:

• Collaborate with threat intelligence and cyber security teams to craft and refine detections based on real‑world threat activity.
• Develop and maintain high‑fidelity detection methods across Security Information and Event Management (SIEM), Endpoint Detection and Response (EDR) and Network Detection and Response (NDR).
• Recognise repeating tasks, design and develop code/script to automate and orchestrate workflows.
• Document and conduct peer‑review of detection logic, assumptions, expected outcomes and validation methods to ensure a rigorous and repeatable process.

Challenges:

• Applying strong software engineering discipline into detection content, which requires practices such as version control, peer reviews, unit testing and automation.
• Validating detection codes without relying on live incidents.
• Adapting to constantly evolving attackers, requiring regular review and updates of detection methods.
• Developing and maintaining detection methods for diverse network infrastructure environments.

What we are looking for:

• Education in Cybersecurity, Computer Science, Information Security, or a related field.
• At least 6 years of working experience in IT or cyber environment.
• Good understanding of MITRE ATT&CK TTPs.
• Related professional qualifications/certifications is advantageous.
• Experience with coding/scripting languages is advantageous.
• Strong communication and documentation skills.
• Ability to work independently in a fast‑paced environment.
• Collaborative spirit for cross‑functional team engagement.
• Only shortlisted candidates will be notified.

About MINDEF

The mission of MINDEF and the Singapore Armed Forces is to enhance Singapore's peace and security through deterrence and diplomacy, and should these fail, to secure a swift and decisive victory over the aggressor. The Defence Executive Officer (DXO) scheme is the non‑uniformed career scheme of MINDEF that offers myriad opportunities in various job functions, such as corporate communications, cyber security, data analytics and visualisation, defence policy, finance, HR, psychology, and more. Embodying the same level of commitment towards defence, DXOs work together with their military counterparts to contribute to MINDEF/SAF’s mission and ensure Singapore's security and stability. United by this common cause, our lines of defence complement each other to secure the prosperity and progress of our nation.