SOC Threat Intelligence Engineer

Housing & Development Board; Singapore; On-site; SGD 72,000 - 110,000; Full time

Job summary

Housing & Development Board is seeking a cybersecurity professional to join its SOC. The role focuses on threat intelligence, SOC engineering, and automation to strengthen HDB's digital infrastructure.

You will contribute to threat hunting, incident response, and continuous improvement across security operations, working with multiple teams to protect critical ICT systems.

Qualifications

• Experience in cyber threat intelligence analysis and SOC engineering.
• Strong experience with IDS/IPS, firewalls, SIEM, email and web security, cloud and endpoint protection.
• At least 2 years in a SOC or equivalent cybersecurity role.
• Analytical, detail-oriented, able to work under pressure during incidents.
• Strong written and verbal communication across stakeholders.
• Experience in cyber intelligence analysis and deployment of monitoring/detection solutions.
• Professional certifications such as CTIA, SIEM, SOAR, XDR/EDR, or related qualifications.

Responsibilities

• Analyse threat intelligence to help detect, prevent and respond to cyber threats.
• Provide SOC engineering support, evaluate new tools, and assist procurement and deployment.
• Assist incident response with containment and recovery guidance.
• Design and improve SOC processes and automation to reduce response times.
• Collaborate with cross-functional teams and produce regular reports for stakeholders.

Skills

Cyber threat intelligence

SOC engineering

Threat hunting

IDS/IPS

Firewalls

SIEM

Email security

Web security

Cloud security

Endpoint security

CTIA certification

SIEM certification

SOAR

XDR/EDR

Technical writing

Incident response

Job description

[What the role is]

As members of our Security Operations Centre (SOC) Team, you will be at the forefront of cybersecurity defence, playing a critical role in safeguarding HDB's ICT infrastructure. Whether delivering timely and actionable threat intelligence to help the organisation anticipate, detect and respond effectively to evolving cyber threats, or engineering and maintaining a robust security operations capability by equipping the SOC with the right tools, platforms and technologies, you will be an integral part of a team dedicated to keeping HDB's digital environment secure.

[What the role is]

As members of our Security Operations Centre (SOC) Team, you will be at the forefront of cybersecurity defence, playing a critical role in safeguarding HDB's ICT infrastructure. Whether delivering timely and actionable threat intelligence to help the organisation anticipate, detect and respond effectively to evolving cyber threats, or engineering and maintaining a robust security operations capability by equipping the SOC with the right tools, platforms and technologies, you will be an integral part of a team dedicated to keeping HDB's digital environment secure.

[What you will be working on]

Cyber Threat Intelligence Analysis

• Continuously review and enhance the cyber intelligence framework to provide a systematic and organized framework for collecting, processing, and leveraging intelligence to enhance HDB's cybersecurity posture and decision-making capabilities.
• Integrate the cyber intelligence framework with the HDB's Security Operations Centre (SOC) and incident response team and ensure that the intelligence gathered is effectively used to detect, prevent, and respond to cyber threats.
• Continuously monitor and collect information from multiple sources, including threat intelligence feeds, security vendors, dark web forums, social media, and other online platforms, to identify emerging cyber threats and attack trends.
• Analyse the collected threat intelligence data to identify patterns, trends, and potential cybersecurity risks.
• Prioritize and triage threats based on their relevance and potential impact to HDB.
• Conduct in-depth analysis of threat actors, their motivations, capabilities, and tactics, and provide insights on potential risks and impacts to the organization's systems, networks, and data.
• Produce regular and ad-hoc reports, briefings, and alerts on emerging threats, trends, and risk assessments to relevant stakeholders, including senior management, incident response teams, and other cybersecurity teams. The report shall also provide technical information in a clear and actionable format for various stakeholders.
• Provide timely and accurate intelligence support on a rostered 24/7 standby duty, and when activated during security incidents, assist incident response teams in understanding the nature and scope of the threat, and provide guidance on containment, remediation and recovery strategies.
• Support vulnerability management efforts by analysing threat intelligence data to identify vulnerabilities, exploit trends, and potential targets, and prioritize patching and mitigation activities.
  
  

SOC Engineering

• Research and evaluate new and emerging security tools, platforms and technologies, and assess their technical feasibility and suitability for integration into the organisation's existing security infrastructure and workflows.
• Liaise with product vendors to conduct Proof-of-Concept (POC) and technical evaluation of security tools, platforms and technologies.
• Responsible for the procurement and implementation of security tools, platforms and technologies.
• Perform knowledge transfer, prepare documentation, and hand over the operations of newly implemented security tools, platforms and technologies to the Security Operations team.
  
  

Process Innovation and Automation

• Design and refine SOC processes and procedures to enhance operational efficiency and reduce response times.
• Implement automation and artificial intelligence solutions to optimise SOC operations, improve threat detection and response capabilities.
  
  

Professional Development and Cross-Functional Collaboration

• Participate in diverse SOC activities including security monitoring, threat hunting and incident response to broaden your expertise and accelerate career development within HDB's growing cybersecurity function.
  
  

[What we are looking for]

• Have demonstrable experience and in-depth knowledge in cyber threat intelligence analysis and SOC engineering.
• Possess strong experience with various cybersecurity technologies including IDS/IPS, firewalls, SIEM platforms, email security, web security, cloud security, and endpoint security solutions.
• Have at least 2 years of experience as an engineer and/or cyber intelligence analyst in a SOC environment or equivalent cybersecurity engineering/operations role.
• Demonstrate strong analytical and problem-solving skills with meticulous attention to detail.
• Can work effectively under pressure, meet critical deadlines, and make sound decisions during security incidents.
• Strong written and verbal communication skills, with ability to explain technical concepts to diverse stakeholders across the organisation.
• Have experience in cyber intelligence analysis, implementation of security monitoring and detection solutions, and project management.
• Hold professional certifications such as EC-Council Certified Threat Intelligence Analyst (CTIA), SIEM, SOAR and XDR/EDR product certifications, or other relevant cybersecurity qualifications.
  
  

Good to Have:

• Exceptional attention to detail and commitment to quality in all security operations.
• Proven ability to work autonomously while maintaining high standards of reliability, trustworthiness, and integrity.
• Natural sense of ownership and accountability, taking initiative to drive continuous improvement in security processes.
• Collaborative mindset with ability to work effectively across cross-functional teams.
• Knowledge of cloud security frameworks and experience with modern security orchestration tools.
  
  

Successful candidates will be offered a 1+1 year contract in the first instance.