Threat Intelligence Analyst, Threat Intelligence & Response Division

IMDA; Singapore; On-site; SGD 70,000 - 120,000; Full time

Job summary

IMDA in Singapore seeks a Threat Intelligence Analyst to join the Connectivity, Cybersecurity & Resilience Group. You will monitor threat actors, produce timely intelligence, and support security investigations.

The role requires 3–5 years in threat intelligence, strong analytical skills, and experience communicating findings to senior stakeholders. On-site in Singapore with collaborative team culture.

Qualifications

• 3–5+ years in threat intelligence or security analysis.
• Experience preparing threat briefings for senior stakeholders.
• Publish threat research with MITRE ATT&CK mappings and mitigations.
• Proficiency with threat intel platforms and security integrations.
• Knowledge of telecom/media tech and enterprise environments.
• Certifications such as CREST CCTIM/GCFA are a plus.
• Strong communication and collaboration across teams.

Responsibilities

• Monitor threat actors and trends affecting telecom and media sectors.
• Produce timely cyber threat intelligence reports and briefings.
• Support threat investigations, risk assessments, and malware analyses.
• Contribute to threat detection improvements and MITRE ATT&CK mappings.
• Collaborate with stakeholders to translate intel into mitigations.

Skills

Threat intelligence

Threat briefing

Analytical thinking

Communication skills

MITRE ATT&CK knowledge

Education

Bachelor's in Information Security or related

Tools

Threat Intelligence Platform

EDR / endpoint security

Windows / Linux security

Job description

[What the role is]

This role sits within the Connectivity, Cybersecurity & Resilience Group

[What the role is]

This role sits within the Connectivity, Cybersecurity & Resilience Group

(C2R) Group. C2R strengthens the cybersecurity and resilience posture of

the telecommunication and media sectors in Singapore.

The Group keeps Singapore’s digital connectivity secure,

trusted, and robust against an evolving and increasingly

complex threat landscape.

[What you will be working on]

• Work with a team of Threat Intelligence analysts to maintain situational awareness for Infocomm and Media sectors, keeping abreast with related threat groups' tactics and techniques to produce timely, relevant and accurate cyber intelligence for stakeholders.
• Recommend and review intelligence requirements and collection sources to support intelligence analysis and production and research cyber threats affecting Telecommunication and Media infrastructure and systems to recommend mitigations and threat use cases/signatures to detect related attacks.
• Produce cyber intelligence products and briefings including specific ad-hoc threat reports, monthly threat trends, and annual threat landscape reports, ensuring all intelligence outputs are accurate, relevant and actionable.
• Support cyber incident investigations, threat and cybersecurity risk assessments, malware analysis, and cyber exercises with in-depth research and analysis, leveraging MITRE ATT&CK tactics and techniques, indicators of attack/compromise, and recommended mitigations.
• Ensure processes are documented and updated and contribute to the continuous improvement of threat detection capabilities, including threat detection queries in Endpoint Detection and Response (EDR) systems.

[What we are looking for]

• Background in Information Security, Computer Engineering, Computer Science, or equivalent discipline with 3 to 5 years or more of experience as a Threat Intelligence Analyst
• Demonstrated experience preparing and presenting threat briefings to information security and technology stakeholders across senior management, operations, and customer levels.
• Experience publishing cyber threat or vulnerability research and writing cyber incident or threat assessment reports incorporating MITRE ATT&CK tactics and techniques, indicators of attack/compromise, and recommended mitigations.
• Proficiency in Threat Intelligence Platforms and their integrations with security solutions, along with knowledge of telecommunications, broadcast, media equipment and technologies, and enterprise environments.
• Experience with network traffic/log analysis, computer/mobile forensics, or malware analysis, and knowledge of network and operating systems (Windows, Linux) security, cloud architecture, or application security.
• Relevant professional certifications including CREST CCTIM, CRTIA, CPTIA, GIAC GCFA, GREM, GCFE, or GCIH are highly regarded.
• Strong analytical skills with a passion to overcome challenges, and good communication and interpersonal skills to engage effectively with diverse stakeholders.