Senior Cyber Threat Intelligence Lead (ICS & Threat Research)

Public Service Division; Singapore; Presencial; SGD 120.000 - 180.000; Jornada completa

Descripción de la vacante

Public Service Division in Singapore seeks a Lead / Principal / Senior Cyber Threat Intelligence Analyst to identify, track, and analyze threats, protecting critical IT/OT systems in land transport. This role emphasizes active threat research and turning global threat data into local monitoring strategies and detection logic.

You will develop TI programs, map TTPs to MITRE ATT&CK, create detections (YARA/Sigma/Snort), and support incident response as Tier‑3.

Formación

• 8+ years in cybersecurity with 4+ years in Threat Intelligence, SOC operations, or IR.
• Bachelor's degree in Computer Science or Information Security.
• GCTI or CISSP certification (GIAC or ISC) preferred.
• Experience mentoring junior analysts and uplifting SOC/CERT capabilities.
• Strong technical writing and executive briefing skills.
• Ability to work independently in a fast-paced cross-functional setting.
• Knowledge of MITRE ATT&CK, Diamond Model, and Cyber Kill Chain.

Responsabilidades

• Lead the development and continuous improvement of the TI function, including SOPs and CTI solution implementation.
• Conduct proactive research into threat actor TTPs, focusing on the Asia-Pacific region and Industrial Control Systems (ICS).
• Curate, validate, and maintain high-fidelity IOCs for ingestion into SIEM, EDR, and Network Traffic Analysis tools.
• Translate research findings into detection artefacts (YARA, Sigma, Snort) to strengthen proactive threat hunting and detection capabilities.
• Act as the Tier-3 intelligence lead during critical incidents, providing real-time threat context and attribution support to the CERT team.
• Monitor and prioritise newly disclosed CVEs based on organisation's technology stack for patching guidance.
• Map observed adversary behaviours to the MITRE ATT&CK framework to identify visibility gaps.
• Produce high-quality intelligence reports and monthly summaries for management and public transport operators.

Conocimientos

OSINT & Investigation

Automation

Log Analysis

MITRE ATT&CK

Educación

Bachelor’s degree in Computer Science or Information Security

GIAC GCTI or CISSP

Herramientas

SIEM

EDR

YARA

Sigma

Snort

Descripción del empleo

Public Service Division in Singapore seeks a Lead / Principal / Senior Cyber Threat Intelligence Analyst to identify, track, and analyze threats, protecting critical IT/OT systems in land transport. This role emphasizes active threat research and turning global threat data into local monitoring strategies and detection logic.

You will develop TI programs, map TTPs to MITRE ATT&CK, create detections (YARA/Sigma/Snort), and support incident response as Tier‑3.