Head, Cyber Threat Intelligence, Tech Ops, xCyber

HTX (Home Team Science & Technology Agency); Singapore; On-site; SGD 100,000 - 130,000; Full time

Job summary

HTX (Home Team Science & Technology Agency) is looking for a Cyber Threat Intelligence Lead to support the Deputy Director in developing CTI capabilities for the Ministry of Home Affairs. This role encompasses building a specialized team to provide actionable intelligence and perform risk assessments vital for decision-making in various situations.

Ideal candidates should have a degree in relevant fields and substantial experience in Cyber Threat Intelligence, along with strong leadership skills. Knowledge of incident management and threat frameworks is essential.

Qualifications

• At least 8 years of experience in Cyber Threat Intelligence, Digital Forensics, and/or SOC environments.
• 5 years of hands-on CTI or DFIR experience.
• Knowledge of cyber kill chain processes and MITRE ATT&CK framework.

Responsibilities

• Lead and develop a high performing cyber threat intelligence team.
• Establish cyber threat intelligence frameworks and methodologies.
• Provide strategic cyber threat intelligence and informed impact assessments.
• Serve as a subject matter expert in crisis situations.
• Deliver early warning and detection of emerging cyber threats.

Skills

Threat intelligence

Cybersecurity incident management

Cyber investigations

Digital Forensics

Incident Response

Strategic leadership

Education

Degree in Computer Science or Information Technology

GCTI certification

Relevant certifications (ENCE, GCFA, etc.)

Job description

What The Role Is

The job holder will support the Deputy Director (Technical Operations) in leading and developing Cyber Threat Intelligence (CTI) capabilities for the Ministry of Home Affairs (MHA) and the Home Team Science and Technology Agency (HTX). This role is responsible for building and leading a specialised cyber threat intelligence team to provide timely, actionable intelligence and risk assessments that support strategic decision‑making during both peacetime and crisis situations. The role contributes directly to strengthening the protection, resilience, and security posture of MHA’s digital systems and networks.

What You Will Be Working On

• Lead and develop a high performing cyber threat intelligence team with deep technical expertise in threat intelligence, threat modelling, and adversary analysis.
• Establish and enhance cyber threat intelligence frameworks, methodologies, and threat management models to assess and communicate security risks to senior management.
• Provide strategic cyber threat intelligence and informed impact assessments to support HTX and Home Team Departments (HTDs) in decision making related to attack surfaces and threat exposure.
• Serve as a subject matter expert in cyber threat intelligence during crisis situations, providing timely and credible intelligence to support operational and strategic responses.
• Deliver early warning and detection of emerging cyber threats, including sector specific and nation state threats relevant to MHA and HTX.
• Produce timely threat analysis, intelligence assessments, and briefings for senior leadership.
• Work closely with HTDs, internal stakeholders, and senior management to provide sense making of the overall cybersecurity posture across MHA systems.
• Collaborate with wider Government agencies, industry partners, and strategic counterparts on cyber threat intelligence sharing and joint analysis efforts.
• Contribute to whole of government cybersecurity intelligence initiatives and cross sector threat assessments.

What We Are Looking For

• Degree in Computer Science, Information Technology, or related Engineering discipline; GCTI is preferred, and other relevant certifications, including ENCE, GCFA, GCIA, GREM, and GNFA, will also be taken into consideration.
• At least 8 years of relevant experience in Cyber Threat Intelligence (CTIH), Digital Forensics and Incident Response (DFIR), and/or SOC environments, including 5 years of hands‑on CTIH/DFIR experience.
• Strong technical leadership in cyber investigations, threat intelligence, and incident response.
• Knowledge of cyber kill chain processes, MITRE ATT&CK framework, and cybersecurity incident management.
• Proven ability to drive strategic capability development and communicate complex intelligence to senior stakeholders.
• High integrity, resilience, strong leadership and communication skills, with a positive and learning oriented mindset.