Senior Cyber Threat Intel Lead

Land Transport Authority; Singapore; On-site; SGD 120,000 - 180,000; Full time

Job summary

Land Transport Authority in Singapore seeks a Lead/Principal/Senior Cyber Threat Intel Analyst to lead the Threat Intelligence function across the transport sector.

You will perform proactive threat research, track actors, manage IOC lists for SIEM/EDR, and develop detection artefacts (YARA, Sigma, Snort) to enable proactive hunting.

Strong MITRE ATT&CK, Diamond Model, and cyber risk reporting skills are essential, along with mentoring and clear leadership for cross‑functional teams.

Qualifications

• 8+ years in cybersecurity with at least 4 years in Threat Intelligence or IR.
• Bachelor’s degree in Computer Science, Information Security or related field.
• GIAC GCTI or CISSP (or equivalent) certifications.
• Mentoring junior analysts and uplifting SOC/CERT capabilities.
• Strong technical writing and ability to brief executives.
• Cross‑matrix and fast‑paced operational setting experience.

Responsibilities

• Intelligence Programme Development: lead TI function, SOPs, and CTI solutions.
• Threat Research & Actor Tracking: research TTPs in APAC and ICS contexts.
• Monitoring List Management: curate IOC lists for SIEM/EDR analytics.
• Detection Engineering Support: translate findings into YARA/Sigma/Snort rules.
• Incident Response Integration: Tier-3 intel lead during critical incidents.
• Vulnerability Intelligence: monitor CVEs and advise patching teams.
• TTP Mapping: align with MITRE ATT&CK framework.
• Stakeholder Reporting: produce executive‑level threat updates.
• OSINT & Investigation: open-source investigations across deep/dark web.
• Automation: scripting for TIP workflows and data handling.
• Log Analysis: correlate TI with internal telemetry.
• Framework Knowledge: MITRE ATT&CK, Diamond Model, Cyber Kill Chain.

Skills

Threat intelligence

Incident response

OSINT

Log analysis

Scripting

MITRE ATT&CK

Threat hunting

Detection engineering

Education

Bachelor’s degree in Computer Science/Information Security

GIAC Cyber Threat Intelligence (GCTI) or CISSP

Tools

YARA

Sigma

Snort

SIEM

EDR

Threat Intelligence Platform (TIP)

Job description

Land Transport Authority in Singapore seeks a Lead/Principal/Senior Cyber Threat Intel Analyst to lead the Threat Intelligence function across the transport sector.

You will perform proactive threat research, track actors, manage IOC lists for SIEM/EDR, and develop detection artefacts (YARA, Sigma, Snort) to enable proactive hunting.

Strong MITRE ATT&CK, Diamond Model, and cyber risk reporting skills are essential, along with mentoring and clear leadership for cross‑functional teams.