Senior Associate/ Assistant Manager, Cyber Threat Intelligence Analyst

Changi Airports International Pte Ltd; Singapore; On-site; SGD 60,000 - 85,000; Full time

Job summary

Changi Airports International Pte Ltd is seeking a Cyber Threat Intelligence Analyst to deliver timely and actionable intelligence to strengthen cyber defence. You will produce threat intelligence, identify vulnerabilities and support broader cyber operations, including hunting, investigations and forensic analysis as needed.

The role reports to the Team Manager, Cyber Intelligence and Response and may require occasional outside-hours support for significant threats or incidents.

Qualifications

• Bachelor’s degree or higher in cyber security or related field.
• 1–3 years of experience in cyber threat intelligence, security operations or related role.
• Familiarity with threat intelligence concepts and the intelligence lifecycle.

Responsibilities

• Define and maintain intelligence requirements and collection plans.
• Gather, validate and analyse threat intelligence from sources.
• Assess threat actors, campaigns, vulnerabilities, indicators, and TTPs.
• Produce vulnerability intelligence and actionable recommendations.
• Prepare and disseminate threat advisories, briefs and landscape summaries.
• Translate intelligence into operational outcomes and detection use cases.
• Collaborate with Security Operations, Forensics, Incident Management and Vulnerability teams.
• Support broader cyber operations when needed.
• May be activated outside normal hours for significant incidents.

Skills

Cyber threat intelligence concepts

MITRE ATT&CK framework

Analytical thinking

Written communication

Stakeholder communication

Education

Degree in Cyber Security

Tools

Threat intelligence platform

Job description

Select how often (in days) to receive an alert:

Requisition ID: 7175

Country: SG

Work Schedule: Non-Shift Work Schedule

Employment Type: Permanent

Description

Role summary
We are seeking a Cyber Threat Intelligence Analyst to deliver timely, relevant and actionable intelligence that strengthens the organisation’s cyber defence.
Reporting to the Team Manager, Cyber Intelligence and Response, you will produce threat and vulnerability intelligence and support broader cyber operations activities (such as threat hunting, incident investigation, forensic analysis and intrusion analysis where required).

Key responsibilities

• Define and maintain intelligence requirements and collection plans in line with organisational priorities.
• Gather, validate and analyse threat intelligence from approved internal, open-source, commercial and managed-service sources.
• Assess threat actors, campaigns, vulnerabilities, indicators, and tactics, techniques, and procedures relevant to the organisation.
• Produce vulnerability intelligence by assessing emerging vulnerabilities, exploit trends and threat actor activity, and translating them into actionable recommendations for prioritisation, monitoring and risk reduction.
• Prepare and disseminate clear intelligence products, including threat advisories, vulnerability briefs, campaign summaries, threat profiles and landscape briefings.
• Translate intelligence into operational outcomes, including detection use cases, monitoring recommendations and control improvement opportunities.
• Work closely with Security Operations, Digital Forensics, Incident Management and Vulnerability Management teams to ensure intelligence supports day-to-day cyber defence activities.
• Support broader cyber operations work beyond CTI, such as threat hunts, investigations, forensic support and intrusion analysis when operational needs arise.
• May be activated outside normal working hours on an occasional basis to support significant cyber security incidents, emerging threats or other time-critical cyber operations
• Coordinate with the CTI managed security service provider to ensure that external cyber threat intelligence and digital risk protection outputs are relevant, of good quality, and meet the expectations of internal stakeholders.
• Administer the threat intelligence platform, including threat feeds, enrichment, tagging and workflow configuration.
• Maintain threat profiles, operating procedures, knowledge bases and service metrics that support consistent intelligence delivery.
• Improve CTI processes, tools and stakeholder engagement to increase the quality, relevance and impact of intelligence outputs.

Required qualifications and experience

• Degree with 1 - 3 years of experience in cyber threat intelligence, security operations or a related cyber security role.
• An active interest in, and up-to-date awareness of, the evolving cyber threat landscape.
• Working knowledge of cyber threat intelligence concepts, including indicators of compromise, the MITRE ATT&CK framework, tactics, techniques and procedures, and the intelligence lifecycle.
• Familiarity with the Structured Threat Information Expression and Trusted Automated eXchange of Indicator Information standards, Sigma rules, or Yet Another Recursive Acronym rules.
• Strong analytical judgement, attention to detail and written communication skills.
• Ability to communicate clear, evidence-based recommendations to both technical and non-technical audience

Preferred qualifications

• Experience coordinating, reviewing or managing deliverables from a managed security service provider, including assessing whether the provider’s standards and outputs meet internal stakeholder expectations.
• Hands-on experience operating or configuring a threat intelligence platform, including the management of threat feeds, enrichment, tagging and workflows.
• Completed formal study, coursework or training in cyber threat intelligence.
• Currently undertaking cyber threat intelligence-related training or working towards a relevant certification.
• A personal project or portfolio demonstrating practical cyber threat intelligence interest