Head, Cyber Threat Hunting, Tech Ops, xCyber

HTX (Home Team Science & Technology Agency); Singapore; On-site; SGD 180,000 - 240,000; Full time

Job summary

HTX, Singapore's Science and Technology agency, seeks a senior cyber threat hunting leader to join the xCybersecurity unit. The role leads a team of specialists to support HTX and MHA with threat hunting, DFIR and risk-informed decision making during peace and crisis.

You will develop an in-house CTH capability, provide guidance on attack surfaces and threat exposure, and coordinate with government and industry partners on threat modelling and incident response.

Qualifications

• A bachelor’s degree in Computer Science, Information Technology, or related Engineering fields.
• Minimum 10 years in a relevant field (CTH/DFIR/SOC) with at least 5 years hands-on in cyber threat hunting.
• Professional cybersecurity qualifications preferred (ENCE/GCFA/GCIA/GREM/GCTI/GNFA).

Responsibilities

• Lead and develop Cyber Threat Hunting capabilities for HTX and MHA during peace and crisis times.
• Enhance protection and resilience of CIIs/SIIs through proactive hunting of threats.
• Develop an in-house CTH team to support DFIR during crises.
• Collaborate with government and industry partners on threat hunting and investigations.

Skills

Cyber threat hunting

DFIR

SIEM analytics

Threat modelling

Incident response

Education

Bachelor's degree in Computer Science or related field

Tools

SIEM tools

Digital forensics tools

Threat intelligence platforms

Threat modelling tools

Job description

What The Role Is

HTX is Singapore's Science and Technology agency that brings together diverse scientific and engineering capabilities to develop transformative, operationally ready solutions for public safety. As a statutory board under the Ministry of Home Affairs, HTX works at the forefront of science and technology to empower the Home Team with cutting-edge capabilities. Guided by our mission to amplify, augment and accelerate the Home Team's advantage, we are committed to keeping Singapore the safest place on planet Earth.

What The Role Is

HTX is Singapore's Science and Technology agency that brings together diverse scientific and engineering capabilities to develop transformative, operationally ready solutions for public safety. As a statutory board under the Ministry of Home Affairs, HTX works at the forefront of science and technology to empower the Home Team with cutting-edge capabilities. Guided by our mission to amplify, augment and accelerate the Home Team's advantage, we are committed to keeping Singapore the safest place on planet Earth. The jobholder will be a member of xCybersecurity, lead and develop Cyber Threat Hunting (CTH) capabilities for MHA and HTX. This will broadly require the job holder to lead a team of technical specialised with deep knowledge in cyber threat hunting to support HTX and HTDs on strategic decision-making on attack surface or threat exposure during peace and crisis times and enhance the protection and resilience of MHA systems.

What You Will Be Working On

• To enhance the protection and resilience of MHA Critical and Significant Information Infrastructures (CIIs/SIIs) with proactive hunting of advanced persistent cyber threats
• Serve as Subject matter experts in cyber threat hunting during times of crisis.
• Develop a ready in-house CTH team to step up for DFIR during times of crisis.
• Work with wider Government and industry/strategic partners in Threat Hunting, as well as supporting investigation in digital forensics, if required.
• Development of threat management framework and threat modelling to provide senior management on the security risk posture of MHA and HTX.

What We Are Looking For

• A bachelor’s degree in Computer Science, Information Technology, or related Engineering fields
• At least 10 years of experience in a relevant field (CTH/DFIR/SOC domain), with a minimum of 5 years hands-on experience in cyber threat hunting, cyber threat intelligence and DFIR.
• Professional cybersecurity qualifications such as ENCE/GCFA/GCIA/GREM/GCTI/GNFA is preferred
• Ability to provide strong technical guidance on investigation and technical assessment.
• Hands-on experience with SIEM/security analytics use-cases
• Hands-on experience with digital forensics, threat intelligence, SIEM and malware analysis tools
• Strong knowledge of cybersecurity kill-chain processes, threat response, incident response, MITRE ATT&CK framework and cybersecurity incident management.
• Advanced understanding of Windows and Unix/Linux infrastructure and system.
• Situational awareness of latest cyber threats All new hires are appointed on a two-year contract in the first instance and will be assessed and considered for permanent tenure over time, based on performance. As part of the shortlisting process for this role, you may be required to complete a medical declaration and/or undergo further assessment. All shortlisted applicants will be updated on the status of their applications within 4 weeks upon closing of the advertisement.