Senior Cyber Threat Intelligence Lead

sggovterp; Singapore; On-site; SGD 120,000 - 180,000; Full time

Job summary

sggovterp is seeking a LEAD/PRINCIPAL/SENIOR CYBER THREAT INTEL ANALYST to identify, track, and analyse emerging threats targeting critical IT/OT systems in the land transportation sector. The role emphasizes active threat research and actionable monitoring strategies for localised defense.

You will develop TI capabilities, lead threat research, curate IOCs, and translate findings into detections and incident response context for the CERT team.

Qualifications

• Minimum 8 years in cybersecurity with 4+ years in Threat Intelligence, Advanced SOC Operations, or Incident Response.
• Bachelor's degree in CS, Information Security or related field.
• Professional certifications such as GIAC GCTI or CISSP are preferred.
• Demonstrated mentoring of junior analysts and uplift of SOC/CERT capabilities.

Responsibilities

• Lead development and continual improvement of the TI function, SOPs, and CTI solutions for collection, analysis, and dissemination.
• Conduct proactive threat research on TTPs, focusing on APAC and ICS.
• Curate and maintain high-fidelity IOCs for SIEM/EDR/NTTA ingestion; validate detections.
• Translate research into detections (YARA, Sigma, Snort).
• Serve as Tier-3 intelligence lead during incidents, providing real-time threat context and attribution support to CERT.
• Monitor CVEs and provide risk-based assessments for patching and infrastructure teams.
• Map attacker behaviors to MITRE ATT&CK to identify visibility gaps.
• Produce high-quality intelligence reports and monthly strategic summaries for management.

Skills

OSINT & Investigation

Automation

Log Analysis

MITRE ATT&CK

Education

Bachelor's degree in Computer Science or Information Security

Job description

sggovterp is seeking a LEAD/PRINCIPAL/SENIOR CYBER THREAT INTEL ANALYST to identify, track, and analyse emerging threats targeting critical IT/OT systems in the land transportation sector. The role emphasizes active threat research and actionable monitoring strategies for localised defense.

You will develop TI capabilities, lead threat research, curate IOCs, and translate findings into detections and incident response context for the CERT team.