Lead, Cybersecurity Operations Specialist, Singpass

Government Technology Agency; Singapore; Hybrid; SGD 180,000 - 260,000; Full time

Benefits offered by this job

Flexible work arrangements

Leave benefits and wellness programs

Job summary

GovTech seeks a Lead, Cybersecurity Operations Specialist to drive security strategy and operations protecting critical public services in Singapore. You will own security domains, translate threat intelligence into investments, and lead security capabilities from design through sustained operations.

You will guide incident response, mentor analysts, and partner with engineering and product teams to embed security in every lifecycle stage, delivering measurable risk reductions in a fast-moving

Qualifications

• 10+ years of experience in cybersecurity, with 3+ years as a full-time SOC analyst or threat hunter.
• Hands-on software engineering experience, ability to read code and understand system architecture for security.
• Demonstrated experience leading security teams and driving strategic initiatives end-to-end.
• Proven ability to lead incident response for complex, high-stakes events.
• Certifications such as GMON, GCTD, GCFA, GNFA, GCFR, GCTI, GCIA, OSCP or similar.
• Operational experience building or maturing security operations capabilities (EDR, NDR, SIEM, SOAR).
• Strong ability to influence stakeholders across engineering, product, and policy teams.

Responsibilities

• Own and drive security impact in the digital identity space.
• Lead security capabilities from design to sustained operations.
• Define detection strategies, response playbooks, and tooling roadmaps.
• Lead and mentor the team through day-to-day and crisis cybersecurity operations.
• Partner with software engineers and product managers to embed security early in development.
• Operate with autonomy and drive initiatives without waiting for direction.
• Communicate risk and security strategy to align cross-functional teams and leadership.

Skills

Security leadership

Incident response

Threat hunting

Cross-functional collaboration

Autonomy

Education

GMON

GCTD

GCFA

GNFA

GCFR

GCTI

GCIA

OSCP

Tools

EDR

NDR

SIEM

SOAR

Threat intelligence

Detection engineering

Job description

GovTechis the lead agency driving Singapore’s Smart Nation initiatives and public sector digital transformation. As the Centre of Excellence forInfocommTechnology and Smart Systems (ICT & SS),GovTechdevelops the Singapore Government’s capabilities in Data Science & Artificial Intelligence, Application Development, Smart City Technology, Digital Infrastructure, and Cybersecurity.

AtGovTech, we offer you a purposeful career to make lives better where we empower our people to master their craft through robust learning and development opportunities all year round.

Play a part in Singapore’s vision to build a Smart Nation and embark on your meaningful journey to build tech for public good. Join us to advance our mission and shape your future with us today!

Learn more aboutGovTechat tech.gov.sg.

About the division:

At Singpass, we aim to provide reliable digital identity for Singapore that streamlines transactions, enables businesses, and protects against fraud. This involves improving the online transaction experience with Singpass and Corppass while keeping it secure. It includes everything from building better frontend applications for residents and keeping an eye on fraudulent transactions to improving internal operations and working with our partners.

What you will be working on:

As a Lead Cybersecurity Operations Specialist, your job will be to:

• Determine what security problems are worth solving in your domain and decide what approach best reduces risk and delivers resilience for our users and systems
• Shape the strategic direction of our cybersecurity capabilities and prioritise initiatives based on threat landscape, resources, and organisational risk appetite
• Work with people from engineering, product, policy, and product operations to embed security across the full lifecycle of our digital services
• Measure and track the effectiveness of our security operations, from detection coverage to response times and risk reduction
• Wear multiple hats to keep our systems and users safe. You may be leading an incident response or threat hunt, reviewing architecture decisions, guiding a junior analyst, or shaping a new detection capability
• Build a culture of security ownership and collaboration with the people you work with

What we are looking for

We are looking for a Lead, Cybersecurity Operations Specialist, who can independently drive security strategy and operations that protect meaningful public services, and operate effectively in a complex, fast-moving threat environment.

In this role, you will:

• Own and drive security impact in the digital identity space
  Take end-to-end ownership of key security domains, shaping direction in alignment with Singpass’ broader strategy. Translate threat intelligence, operational findings, and policy requirements into clear security investments and deliver measurable improvements in our security posture.
• Lead security capabilities from design to sustained operations
  Drive the full lifecycle of security capabilities — from identifying gaps and designing solutions to operationalising them at scale. Define detection strategies, response playbooks, and tooling roadmaps that keep pace with an evolving threat landscape.
• Make high-quality, risk-informed decisions
  Define security metrics, evaluate trade-offs, and prioritise effectively using threat data, operational insights, and strategic context. Focus efforts on initiatives that drive the most meaningful risk reduction across a diverse and evolving attack surface.
• Guide day-to-day and crisis cybersecurity operations
  Lead and mentor the team through day-to-day security operations as well as high-stakes incidents. Bring structure, calm, and technical depth to incident response, ensuring issues are contained, investigated, and resolved with rigour and speed.
• Partner deeply with engineering and product teams
  Work closely with software engineers and product managers with sufficient technical depth to influence architecture decisions, embed security requirements early, and ensure that security is a first-class consideration in how we build and operate our systems.
• Demonstrate strong ownership and bias for action
  Operate with a high degree of autonomy. Navigate ambiguity, identify gaps in our security coverage, and proactively drive initiatives forward without waiting for direction.
• Influence and align stakeholders effectively
  Communicate risk and security strategy clearly to align cross-functional teams and influence stakeholders, including senior leadership. Translate technical findings into business impact and actionable decisions.

Requirements:

• 10+ years of experience in cybersecurity, with 3 years or more of experience as a full-time SOC analyst, threat hunter or related discipline
• Hands-on software engineering experience, with the ability to read, review, and reason about code and system architecture in the context of security
• Demonstrated experience leading security teams and driving strategic security initiatives end-to-end
• Proven ability to lead incident response efforts for complex, high-stakes security events
• Professional certifications such as GMON, GCTD, GCFA, GNFA, GCFR, GCTI, GCIA, OSCP or other relevant certifications
• Operational experience building or maturing security operations capabilities, including EDR, NDR, SIEM, SOAR, threat intelligence, or detection engineering
• Strong ability to influence stakeholders and collaborate across engineering, product, and policy teams, including at the senior leadership level
• Track record of operating with high autonomy in fast-moving environments, including work that goes beyond defined scope

What we offer you:

GovTechis an equal opportunity employer committed to fostering an inclusive workplace that values diverse voices and perspectives, as we believe that diversity is the foundation to innovation.

Our employee benefits are based on a total rewards approach, offering a holistic and market-competitive suite ofperks. These include leave benefits to meet your work-life needs and employee wellness programs.

We champion flexible work arrangements (subject to your job role) and trust that you will manage your own time to deliver your best, wherever you are, and whatever works best for you.

Learn more about life insideGovTechat go.gov.sg/GovTechCareers.
Stay connected with us on social media at go.gov.sg/ConnectWithGovTech