Threat Detection Engineer - Contract

NTT SINGAPORE PTE. LTD.; Singapore; On-site; SGD 70,000 - 110,000; Full time

Job summary

NTT Singapore Pte. Ltd. is seeking a cybersecurity professional to support its Security Exposure and Third-Party Cyber Assurance initiatives.

The role focuses on hands-on operations across SEM and TPCA, monitoring attack surfaces for the organization and its portfolio. You will validate risks, drive remediation, and ensure continual improvement of security posture. The ideal candidate has 3–5 years of practical experience, strong scripting ability, and familiarity with cloud exposures and vendor

Qualifications

• Requires a degree in Computer Science/IT or related field.
• 3–5 years of hands-on experience in cybersecurity operations, attack surface management, third-party cyber risk assessment, or data lake platforms.
• Experience running third-party/vendor security assessments (VDD/ODD, SIG) and control frameworks (NIST, ISO 27001, CIS Controls).

Responsibilities

• Operate Security Exposure Management (SEM) and Third-Party Cyber Assurance (TPCA) tracks.
• Maintain always-on monitoring platforms and drive remediation across portfolio entities and suppliers.
• Document findings clearly and liaise with technical and business stakeholders.

Skills

Cybersecurity operations

Attack surface management

Third-party risk assessment

Data lake platforms

VDD/ODD

NIST

ISO 27001

CIS Controls

ASM/EASM

CTI

Python

PowerShell

Bash

TCP/IP

DNS

HTTP/S

AWS

Azure

GCP

Analytical

Documentation

Communication

Stakeholders

Education

Degree in Computer Science/Information Technology

Tools

ASM/EASM

Dark-web monitoring

Threat intelligence platforms

Cloud security monitoring

Job description

Job Description:

Possess a degree in Computer Science/Information Technology or related field.

3 to 5 years of hands-on experiencein cybersecurity operations, attack surface/exposure management, third-partycyber risk assessment, or data lake platforms.

Strong practical experience inrunning third-party/vendor security assessments and questionnaires (VDD/ODD,SIG) and control frameworks (NIST, ISO 27001, CIS Controls).

Hands-on experience with ASM/EASM,cyber exposure, or digital risk/dark-web monitoring platforms, and Cyber ThreatIntelligence (CTI).

Advanced scripting knowledge (e.g.Python, PowerShell, or Bash) to automate tasks and build reporting dashboardson data lake platforms.

Solid understanding of TCP/IP, DNS,HTTP/S, common cloud exposures (AWS, Azure, GCP), and how third-/fourth-partyrisk propagates.

Strong analytical, documentation,and communication skills, with discretion to handle sensitive findings.

Good communication skill, with the ability to document processes clearly and liaise with technical and business stakeholders.

Summary:

The successful candidate is expected to support CSAD's new Security Exposure and Third-Party Cyber Assurance Centre of Excellence during its build phase.

The role provides the hands‑on technical and operational backbone across two tracks - Security ExposureManagement (SEM), an outside‑in, continuous view of the organization and its portfolio companies' internet‑facing attack surface, and Third-Party Cyber Assurance (TPCA), end‑to‑end due diligence and continuous assurance across third parties and the supply chain.

Responsible to operate the always‑on monitoring platforms, run third‑party assurance, validate clear‑and‑present-danger threats, and drive remediation – narrowing the window between exposure and exploitation across organization, its portfolio companies, and third parties.