Senior Cybersecurity Consultant / Manager (Protective DNS), SCD

Cyber Security Agency of Singapore (CSA); Singapore; On-site; SGD 70,000 - 100,000; Full time

Job summary

The Cyber Security Agency of Singapore (CSA) invites applications for a role to deploy and manage cybersecurity projects that enable security-by-default through protective DNS. The project is in pre-deployment phase in Singapore, with post-deployment responsibilities to monitor threat intelligence and define architecture with government counterparts.

The successful candidate will have a background in cybersecurity or related fields and at least two years’ experience in government-secured

Qualifications

• Background in cybersecurity or related field.
• Knowledge of threat intel feeds for telecoms or internet infra.
• Experience in government-security environments is preferred.
• Strong communication and analytical abilities.

Responsibilities

• Deploy and manage cybersecurity projects to enable security-by-default through DNS protection.
• Develop metrics for threat intelligence efficacy in alignment with technical/regulatory thresholds.
• Collaborate with Government agency counterparts to define architecture and requirements for national infrastructure.

Skills

Threat intelligence

DNS knowledge

BGP knowledge

Government security

Project management

Stakeholder management

Strong communication

Analytical skills

Education

Cybersecurity

Engineering

Computer Science

Infocomm Technology

Communications

Job description

As Singapore harnesses technology to improve lives and livelihoods for all, it is imperative that our plans are built on a strong foundation of cybersecurity, without which we would be exposing ourselves to the multitude of threats that lurk in cyberspace.

The Safer Cyberspace Division in CSA focuses on building national cyber resilience of organisations in Singapore. The division develops and manages national cybersecurity technology initiatives under the SG Cyber Safe programme, in order to enable a safer cyberspace. Examples of programmes which the division has rolled out include the CSA Cyber Essentials and Cyber Trust mark, which are published as national cybersecurity standards in Singapore. The target segment of the division are non-Critical Information Infrastructure (CII) organisations in Singapore, and these can range from large or significant organisations of special interest to Small and Medium Enterprises (SMEs), which form 99% of Singapore’s economy.

We are looking for a candidate to deploy and manage cybersecurity projects that enables security-by-default through protective Domain Name Service (DNS). The goal is to provide protection to organisations and/or individuals in Singapore upstream. The project is currently in pre-deployment phase, and upon completion of deployment, the role will evolve to the responsibilities indicated in the post-deployment phase:

Cyber threat intelligence for use in the intended infrastructure

• Pre-deployment phase: Identify, curate and acquire appropriate sources of threat intelligence from technology vendor(s)
• Post-deployment phase: Develop metrics for, monitor and measure efficacy of threat intelligence, in alignment to technical and/or regulatory thresholds

Distribution of cyber threat intelligence

• Pre-deployment phase: Work with other Government agency counterparts to define requirements and assess appropriate architecture of Government-hosted systems
• Post-deployment phase: Day-to-day operations support, where applicable

Deployment of cyber threat intelligence through intended infrastructure

• Pre-deployment phase: Work with other Government agency counterparts, counterparts in the telecommunications or Internet service provider and the technology vendor(s) to trial the efficacy of the cyber threat intelligence in the intended infrastructure
• Post-deployment phase: Day-to-day operations support, where applicable

Requirements

• Background in Communications, Cybersecurity, Engineering, Computer Science, Infocomm Technology, or a related field
• Good knowledge of the applicability of threat intelligence feeds that are suited for use in telecommunications or Internet infrastructure
• Good knowledge of core Internet technologies and protocols, e.g. DNS, Border Gateway Protocol (BGP)
• Network planning or operations experience in a carrier-grade network environment, such as in a telecommunications or Internet service provider, or vendor, is an advantage
• At least 2 years’ experience deploying or managing technology systems in a Government-secured environment
• Strong technology project management skills, including technology vendor management
• Strong analytical and communication skills, both verbal and written
• Strong interpersonal and stakeholder management skills, with the confidence to engage and manage technical and/or regulatory counterparts in telecoms or Internet service providers