Senior Cybersecurity Analyst (Incident Response & Threat Hunting) (Information Security Department)

Nanyang Technological University; Singapore; On-site; SGD 120,000 - 180,000; Full time

Job summary

The National Institute of Education (NIE), Singapore, invites suitable candidates to apply for the position of Senior Cybersecurity Analyst (Incident Response & Threat Hunting) within the Division of Academic Computing & Information Services (ACIS). This is a 3-year contract position.

Responsibilities include leading end-to-end incident response, performing proactive threat hunting, building detection capabilities, and coordinating with MSSP and external partners to strengthen the institution's

Qualifications

• Bachelor's degree in Information Systems, Computer Science, Cybersecurity, or related discipline.
• Minimum 8 years of IT operations experience, with 4 years in incident response, threat hunting, security operations, or cybersecurity investigations.
• Experience leading cybersecurity incident investigations across endpoint, network, identity, cloud, and application environments.
• Hands-on experience with SIEM, EDR, digital forensics, log analysis, threat detection, and security monitoring technologies.
• Knowledge of cyber threat intelligence, attack techniques, incident handling processes, and investigation methodologies.
• Experience developing or improving detection use cases, monitoring capabilities, and incident response procedures.
• Familiarity with cloud security, identity security, and modern attack vectors affecting enterprise environments.
• Experience coordinating incident response activities with service providers, vendors, and cross-functional stakeholders.
• Relevant cybersecurity certifications such as GCIH, GCFA, GCIA, CISSP, SC-200, or equivalent would be advantageous.
• Strong analytical, communication, stakeholder management, and problem-solving skills, with a passion for continuous learning, innovation, security automation, and emerging technologies to improve resilience.

Responsibilities

• Lead the end-to-end incident response lifecycle, including detection, investigation, containment, remediation, and recovery.
• Assess and triage cybersecurity incidents escalated by the MSSP.
• Conduct and lead investigations across endpoint, identity, network, cloud, and application environments.
• Coordinate incident response activities with internal teams, vendors, MSSP, and external incident response partners.
• Perform proactive and intelligence-led threat hunting to identify emerging threats and suspicious activities.
• Develop and improve detection use cases, monitoring capabilities, and security operations processes.
• Correlate threat intelligence with institutional telemetry and security exposures to identify potential risks.
• Maintain incident response playbooks, investigation procedures, and escalation workflows.
• Plan and conduct cyber incident response exercises, lessons learnt reviews, and resilience validation activities.
• Support the implementation, enhancement, and operationalisation of cybersecurity technologies, automation initiatives, and security projects.

Skills

SIEM

EDR

Digital forensics

Log analysis

Threat detection

Security monitoring

Incident response

Security automation

Stakeholder management

Cloud security

Education

Bachelor's degree in Information Systems, Computer Science, Cybersecurity, or related

Tools

EDR solutions

Forensic tools

Job description

ABOUT THE NATIONAL INSTITUTE OF EDUCATION (NIE)

The National Institute of Education (NIE), Singapore, is Singapore's national teacher education institute and we are proud to be an integral part of the nation's education service. We play a key role in the preparation of teachers and in the provision of teacher professional and school leadership development programmes. We are committed to our vision of being An Institute of Distinction: Leading the Future of Education and our mission to Inspire Learning, Transform Teaching and Advance Research.

NIE invites suitable candidates to apply for the position of Senior Cybersecurity Analyst (Incident Response & Threat Hunting) within the Division of Academic Computing & Information Services (ACIS). This is a 3-year contract position.

Key Responsibilities

• Lead the end-to-end incident response lifecycle, including detection, investigation, containment, remediation, and recovery.




• Assess and triage cybersecurity incidents escalated by the managed security service provider (MSSP).




• Conduct and lead investigations across endpoint, identity, network, cloud, and application environments.




• Coordinate incident response activities with internal teams, vendors, MSSP, and external incident response partners.




• Perform proactive and intelligence-led threat hunting to identify emerging threats and suspicious activities.




• Develop and improve detection use cases, monitoring capabilities, and security operations processes.




• Correlate threat intelligence with institutional telemetry and security exposures to identify potential risks.




• Maintain incident response playbooks, investigation procedures, and escalation workflows.




• Plan and conduct cyber incident response exercises, lessons learnt reviews, and resilience validation activities.




• Support the implementation, enhancement, and operationalisation of cybersecurity technologies, automation initiatives, and security projects.

Requirements

• A University degree in Information Systems, Computer Science, Cybersecurity, or a related discipline.




• Minimum 8 years of IT operations experience where 4 years in incident response, threat hunting, security operations, or cybersecurity investigations.




• Experience leading cybersecurity incident investigations across endpoint, network, identity, cloud, and application environments.




• Hands-on experience with SIEM, EDR, digital forensics, log analysis, threat detection, and security monitoring technologies.




• Knowledge of cyber threat intelligence, attack techniques, incident handling processes, and investigation methodologies.




• Experience developing or improving detection use cases, monitoring capabilities, and incident response procedures.




• Familiarity with cloud security, identity security, and modern attack vectors affecting enterprise environments.




• Experience coordinating incident response activities with service providers, vendors, and cross-functional stakeholders.




• Relevant cybersecurity certifications such as GCIH, GCFA, GCIA, CISSP, SC-200, or equivalent would be advantageous.




• Strong analytical, communication, stakeholder management, and problem-solving skills, with a passion for continuous learning, innovation, security automation, and emerging technologies.

Other Information

NIE staff can take chartered buses at their own expense from or near their home to the NIE campus. This is subject to the availability of bus routes and seats.