IT Security Specialist

Public Service Division; Singapore; On-site; SGD 90,000 - 150,000; Full time

Job summary

The Public Service Division is seeking a cybersecurity professional to join its Security Operations Centre team in Singapore. You will contribute to threat intelligence collection, analysis, and collaboration with incident response to strengthen the organisation’s cyber posture.

You will also engage in SOC engineering, evaluate new tools, and participate in automation initiatives to improve detection and remediation capabilities.

Qualifications

• Demonstrated experience in cyber threat intelligence analysis and SOC engineering.
• Strong knowledge of IDS/IPS, firewalls, SIEM, email, web and cloud security.

Responsibilities

• Lead cyber threat intelligence analysis to support threat detection and response.
• Evaluate security tools and coordinate proofs-of-concept and deployment.
• Improve SOC processes and implement automation to reduce response times.
• Collaborate across teams to support incident response and vulnerability management.

Skills

Threat intelligence

SOC engineering

Threat hunting

Incident response

Tools

IDS/IPS

Firewalls

SIEM

EDR/XDR

SOAR

Job description

[What the role is]

As members of our Security Operations Centre (SOC) Team, you will be at the forefront of cybersecurity defence, playing a critical role in safeguarding HDB’s ICT infrastructure. Whether delivering timely and actionable threat intelligence to help the organisation anticipate, detect and respond effectively to evolving cyber threats, or engineering and maintaining a robust security operations capability by equipping the SOC with the right tools, platforms and technologies, you will be an integral part of a team dedicated to keeping HDB’s digital environment secure.

[What you will be working on]

Cyber Threat Intelligence Analysis

• Continuously review and enhance the cyber intelligence framework to provide a systematic and organized framework for collecting, processing, andleveragingintelligence to enhance HDB’s cybersecurity posture and decision-making capabilities.

• Integrate the cyber intelligence framework with the HDB’s Security Operations Centre(SOC) and incident response team and ensure that the intelligence gathered is effectively used to detect, prevent, and respond to cyber threats.

• Continuouslymonitorand collect information from multiple sources, including threat intelligence feeds, security vendors, dark web forums, social media, and other online platforms, toidentifyemerging cyber threats and attack trends.

• Analyse the collected threat intelligence data toidentifypatterns, trends, and potential cybersecurity risks.

• Prioritize and triage threats based on their relevance and potential impact to HDB.

• Conduct in-depth analysis of threat actors, their motivations, capabilities, and tactics, and provide insights on potential risks and impacts to the organization’s systems, networks, and data.

• Produce regular and ad-hoc reports, briefings, and alerts on emerging threats, trends, and risk assessments to relevant stakeholders, including senior management, incident response teams, and other cybersecurity teams. The report shall also provide technical information in a clear and actionable format for various stakeholders.

• Providetimelyandaccurateintelligence support on a rostered 24/7 standby duty, and when activated during security incidents,assistincident response teams in understanding the nature and scope of the threat, and provide guidance on containment,remediationand recovery strategies.

• Support vulnerability management efforts by analysing threat intelligence data toidentifyvulnerabilities, exploit trends, and potential targets, and prioritize patching and mitigation activities.

SOC Engineering

• Research and evaluate new and emerging security tools,platformsand technologies, and assess their technical feasibility and suitability for integration into the organisation’s existing security infrastructure and workflows.

• Liaise with product vendors to conduct Proof-of-Concept (POC) and technical evaluation of securitytools,platformsand technologies.

• Responsible for the procurement and implementation ofsecurity tools,platformsand technologies.

• Perform knowledge transfer, prepare documentation, and hand over the operations of newly implemented security tools,platformsand technologies to the Security Operations team.

Process Innovation and Automation

• Design and refine SOC processes and procedures to enhance operational efficiency and reduce response times.

• Implement automation and artificial intelligence solutions to optimise SOC operations, improve threat detectionand responsecapabilities.

Professional Development and Cross-Functional Collaboration

• Participate in diverse SOC activities includingsecurity monitoring,threathuntingand incident responseto broaden yourexpertiseand accelerate career development within HDB’s growing cybersecurity function.

[What we are looking for]

• Have demonstrable experience and in-depth knowledge incyber threat intelligence analysis and SOC engineering.

• Possess strong experience with various cybersecurity technologies including IDS/IPS, firewalls, SIEM platforms, email security, web security, cloud security, and endpoint security solutions.

• Have at least 2 years of experience as an engineer and/or cyber intelligence analyst in a SOC environment or equivalent cybersecurity engineering/operations role.

• Demonstrate strong analytical and problem-solving skills with meticulous attention to detail.

• Can work effectively under pressure, meet critical deadlines, and make sound decisions during security incidents.

• Strong written and verbal communication skills, with ability to explain technical concepts to diverse stakeholders across the organisation.

• Have experience incyber intelligence analysis, implementation of security monitoring and detection solutions, and project management.

• Hold professional certifications such as EC-Council Certified Threat Intelligence Analyst (CTIA), SIEM, SOARand XDR/EDR product certifications, or other relevant cybersecurity qualifications.

Good to Have:

• Exceptional attention to detail and commitment to quality in all security operations.

• Proven ability to work autonomously whilemaintaininghigh standardsof reliability, trustworthiness, and integrity.

• Natural sense of ownership and accountability, taking initiative to drive continuous improvement in security processes.

• Collaborative mindset with ability to work effectively across cross-functional teams.

• Knowledge of cloud security frameworks and experience with modern security orchestration tools.

Successful candidates will be offered a1+1 yearcontract in the first instance.