Senior Associate/ Assistant Manager, Cyber Threat Intelligence Analyst

Changi Airport Group; Singapore; On-site; SGD 70,000 - 110,000; Full time

Job summary

Changi Airport Group in Singapore is seeking a Cyber Threat Intelligence Analyst to deliver timely, relevant intelligence that strengthens the organisation’s cyber defence. You will produce threat and vulnerability intelligence and support wider cyber operations such as threat hunting and incident investigations.

The role requires developing intelligence requirements, analysing indicators, and translating findings into actionable recommendations for monitoring and risk reduction, while

Qualifications

• Degree with 1-3 years of experience in cyber threat intelligence, security operations or a related cyber security role.
• Active interest in, and up-to-date awareness of, the evolving cyber threat landscape.
• Working knowledge of cyber threat intelligence concepts, including indicators of compromise, the MITRE ATT&CK framework, tactics, techniques and procedures, and the intelligence lifecycle.
• Familiarity with the Structured Threat Information Expression and Trusted Automated eXchange of Indicator Information standards, Sigma rules, or Yet Another Recursive Acronym rules.
• Strong analytical judgement, attention to detail and written communication skills.
• Ability to communicate clear, evidence-based recommendations to both technical and non-technical audience

Responsibilities

• Define and maintain intelligence requirements and collection plans in line with organisational priorities.
• Gather, validate and analyse threat intelligence from approved internal, open-source, commercial and managed-service sources.
• Assess threat actors, campaigns, vulnerabilities, indicators, and tactics, techniques, and procedures relevant to the organisation.
• Produce vulnerability intelligence by assessing emerging vulnerabilities, exploit trends and threat actor activity, and translating them into actionable recommendations for prioritisation, monitoring and risk reduction.
• Prepare and disseminate clear intelligence products, including threat advisories, vulnerability briefs, campaign summaries, threat profiles and landscape briefings.
• Translate intelligence into operational outcomes, including detection use cases, monitoring recommendations and control improvement opportunities.
• Work closely with Security Operations, Digital Forensics, Incident Management and Vulnerability Management teams to ensure intelligence supports day-to-day cyber defence activities.
• Support broader cyber operations work beyond CTI, such as threat hunts, investigations, forensic support and intrusion analysis when operational needs arise.
• May be activated outside normal working hours on an occasional basis to support significant cyber security incidents, emerging threats or other time-critical cyber operations
• Coordinate with the CTI managed security service provider to ensure that external cyber threat intelligence and digital risk protection outputs are relevant, of good quality, and meet the expectations of internal stakeholders.
• Administer the threat intelligence platform, including threat feeds, enrichment, tagging and workflow configuration.
• Maintain threat profiles, operating procedures, knowledge bases and service metrics that support consistent intelligence delivery.
• Improve CTI processes, tools and stakeholder engagement to increase the quality, relevance and impact of intelligence outputs.

Skills

Threat intel concepts

MITRE ATT&CK

Analytical thinking

Written communication

Threat hunting

Incident response

Education

Bachelor's degree

Job description

Role Summary

We are seeking a Cyber Threat Intelligence Analyst to deliver timely, relevant and actionable intelligence that strengthens the organisation’s cyber defence. Reporting to the Team Manager, Cyber Intelligence and Response, you will produce threat and vulnerability intelligence and support broader cyber operations activities (such as threat hunting, incident investigation, forensic analysis and intrusion analysis where required).

Key Responsibilities

• Define and maintain intelligence requirements and collection plans in line with organisational priorities.


• Gather, validate and analyse threat intelligence from approved internal, open-source, commercial and managed-service sources.


• Assess threat actors, campaigns, vulnerabilities, indicators, and tactics, techniques, and procedures relevant to the organisation.


• Produce vulnerability intelligence by assessing emerging vulnerabilities, exploit trends and threat actor activity, and translating them into actionable recommendations for prioritisation, monitoring and risk reduction.


• Prepare and disseminate clear intelligence products, including threat advisories, vulnerability briefs, campaign summaries, threat profiles and landscape briefings.


• Translate intelligence into operational outcomes, including detection use cases, monitoring recommendations and control improvement opportunities.


• Work closely with Security Operations, Digital Forensics, Incident Management and Vulnerability Management teams to ensure intelligence supports day-to-day cyber defence activities.


• Support broader cyber operations work beyond CTI, such as threat hunts, investigations, forensic support and intrusion analysis when operational needs arise.


• May be activated outside normal working hours on an occasional basis to support significant cyber security incidents, emerging threats or other time-critical cyber operations


• Coordinate with the CTI managed security service provider to ensure that external cyber threat intelligence and digital risk protection outputs are relevant, of good quality, and meet the expectations of internal stakeholders.


• Administer the threat intelligence platform, including threat feeds, enrichment, tagging and workflow configuration.


• Maintain threat profiles, operating procedures, knowledge bases and service metrics that support consistent intelligence delivery.


• Improve CTI processes, tools and stakeholder engagement to increase the quality, relevance and impact of intelligence outputs.

Required Qualifications And Experience

• Degree with 1 - 3 years of experience in cyber threat intelligence, security operations or a related cyber security role.


• An active interest in, and up-to-date awareness of, the evolving cyber threat landscape.


• Working knowledge of cyber threat intelligence concepts, including indicators of compromise, the MITRE ATT&CK framework, tactics, techniques and procedures, and the intelligence lifecycle.


• Familiarity with the Structured Threat Information Expression and Trusted Automated eXchange of Indicator Information standards, Sigma rules, or Yet Another Recursive Acronym rules.


• Strong analytical judgement, attention to detail and written communication skills.


• Ability to communicate clear, evidence-based recommendations to both technical and non-technical audience

Preferred Qualifications

• Experience coordinating, reviewing or managing deliverables from a managed security service provider, including assessing whether the provider’s standards and outputs meet internal stakeholder expectations.


• Hands-on experience operating or configuring a threat intelligence platform, including the management of threat feeds, enrichment, tagging and workflows.


• Completed formal study, coursework or training in cyber threat intelligence.


• Currently undertaking cyber threat intelligence-related training or working towards a relevant certification.


• A personal project or portfolio demonstrating practical cyber threat intelligence interest