Senior Associate/ Assistant Manager, Cyber Threat Intelligence Analyst

Changi Airport Group (Singapore) Pte. Ltd.; Singapore; On-site; SGD 60,000 - 100,000; Full time

Job summary

Changi Airport Group (Singapore) Pte. Ltd. is seeking a Cyber Threat Intelligence Analyst to deliver timely, relevant and actionable intelligence that strengthens the organisation's cyber defence.

You will produce threat and vulnerability intelligence and support broader cyber operations activities (such as threat hunting, incident investigation, forensic analysis and intrusion analysis where required). Reporting to the Team Manager, Cyber Intelligence and Response, you will produce threat

Qualifications

• Degree with 1-3 years in cyber threat intelligence or related cyber security role.
• Awareness of evolving cyber threat landscape.
• Knowledge of MITRE ATT&CK, STIX and indicators of compromise.
• Strong analytical and writing skills.
• Ability to communicate recommendations to both technical and non-technical audiences.

Responsibilities

• Define and maintain intelligence requirements and collection plans in line with organisational priorities.
• Gather, validate and analyse threat intelligence from internal, open-source, commercial and managed-service sources.
• Assess threat actors, campaigns, vulnerabilities, indicators, and TTPs relevant to the organisation.
• Produce vulnerability intelligence and translate into actionable recommendations for prioritisation, monitoring and risk reduction.
• Prepare and disseminate threat advisories, vulnerability briefs, campaign summaries and landscape briefings.
• Translate intelligence into operational outcomes, including detection use cases and control improvements.
• Collaborate with Security Operations, Digital Forensics, Incident Management and Vulnerability Management teams.
• Support broader cyber operations work such as threat hunts, investigations and intrusion analysis as needed.
• May assist outside normal hours for significant incidents or time-critical operations.
• Coordinate with CTI MSSP to ensure outputs meet stakeholder expectations.
• Administer the threat intelligence platform and maintain threat profiles and knowledge bases.
• Improve CTI processes, tools and stakeholder engagement.

Skills

Cyber threat intelligence

Security operations

MITRE ATT&CK

Analytical thinking

Communication skills

Education

Bachelor's degree in cyber security or related field

Tools

Threat intelligence platform

Sigma rules

ATT&CK framework

Job description

Role summary
We are seeking a Cyber Threat Intelligence Analyst to deliver timely, relevant and actionable intelligence that strengthens the organisation's cyber defence.
Reporting to the Team Manager, Cyber Intelligence and Response, you will produce threat and vulnerability intelligence and support broader cyber operations activities (such as threat hunting, incident investigation, forensic analysis and intrusion analysis where required).

Key responsibilities

• Define and maintain intelligence requirements and collection plans in line with organisational priorities.
• Gather, validate and analyse threat intelligence from approved internal, open-source, commercial and managed-service sources.
• Assess threat actors, campaigns, vulnerabilities, indicators, and tactics, techniques, and procedures relevant to the organisation.
• Produce vulnerability intelligence by assessing emerging vulnerabilities, exploit trends and threat actor activity, and translating them into actionable recommendations for prioritisation, monitoring and risk reduction.
• Prepare and disseminate clear intelligence products, including threat advisories, vulnerability briefs, campaign summaries, threat profiles and landscape briefings.
• Translate intelligence into operational outcomes, including detection use cases, monitoring recommendations and control improvement opportunities.
• Work closely with Security Operations, Digital Forensics, Incident Management and Vulnerability Management teams to ensure intelligence supports day-to-day cyber defence activities.
• Support broader cyber operations work beyond CTI, such as threat hunts, investigations, forensic support and intrusion analysis when operational needs arise.
• May be activated outside normal working hours on an occasional basis to support significant cyber security incidents, emerging threats or other time-critical cyber operations
• Coordinate with the CTI managed security service provider to ensure that external cyber threat intelligence and digital risk protection outputs are relevant, of good quality, and meet the expectations of internal stakeholders.
• Administer the threat intelligence platform, including threat feeds, enrichment, tagging and workflow configuration.
• Maintain threat profiles, operating procedures, knowledge bases and service metrics that support consistent intelligence delivery.
• Improve CTI processes, tools and stakeholder engagement to increase the quality, relevance and impact of intelligence outputs.

Required qualifications and experience

• Degree with 1 - 3 years of experience in cyber threat intelligence, security operations or a related cyber security role.
• An active interest in, and up-to-date awareness of, the evolving cyber threat landscape.
• Working knowledge of cyber threat intelligence concepts, including indicators of compromise, the MITRE ATT&CK framework, tactics, techniques and procedures, and the intelligence lifecycle.
• Familiarity with the Structured Threat Information Expression and Trusted Automated eXchange of Indicator Information standards, Sigma rules, or Yet Another Recursive Acronym rules.
• Strong analytical judgement, attention to detail and written communication skills.
• Ability to communicate clear, evidence-based recommendations to both technical and non-technical audience

Preferred qualifications

• Experience coordinating, reviewing or managing deliverables from a managed security service provider, including assessing whether the provider’s standards and outputs meet internal stakeholder expectations.
• Hands-on experience operating or configuring a threat intelligence platform, including the management of threat feeds, enrichment, tagging and workflows.
• Completed formal study, coursework or training in cyber threat intelligence.
• Currently undertaking cyber threat intelligence-related training or working towards a relevant certification.
• A personal project or portfolio demonstrating practical cyber threat intelligence interest