Vice President, Senior Cyber Threat Analyst (Threat Hunting & Incident Response)

Singapore Exchange Limited; Singapore; Presencial; SGD 120.000 - 180.000; Jornada completa

Descripción de la vacante

Singapore Exchange Limited is seeking a Core Threat Hunter to design, plan and run hypothesis-driven threat hunting across enterprise telemetry. You will create hunt hypotheses guided by threat intel, MITRE ATT&CK, and critical infrastructure TTPs to improve detection.

You'll turn findings into durable detection content, draft clear reports for technical teams and stakeholders, and stay ahead of evolving threats.

Responsabilidades

• Design, plan and execute hypothesis-driven threat hunting programs across telemetries.
• Develop hunt hypotheses informed by threat intelligence, MITRE ATT&CK and actor TTPs.
• Analyze system, network, artefacts and forensic data to ID indicators of compromise.
• Convert hunt findings into durable detection content (SIEM/EDR/NDR/SOAR).
• Draft clear hunt reports and present findings to technical teams and stakeholders.
• Proactively track evolving threat landscape to keep hunting capabilities current.
• Support incident response during compromises with timelines and containment guidance.
• Contribute to detection engineering—tune use cases and reduce false positives.
• Participate in exercises, tabletop simulations and red/purple team engagements.
• Provide input on risk assessments and mitigation measures.
• Take on cross-functional tasks such as vulnerability triage and threat intel input.
• Collaborate with vendors and internal stakeholders to achieve outcomes.
• Maintain urgency, discipline, and reporting on key metrics and status.

Descripción del empleo

Core Threat Hunting

• Design, plan and execute hypothesis-driven threat hunting programs across telemetries.
• Develop hunt hypotheses informed by current threat intelligence, MITRE ATT&CK and critical-infrastructure-specific threat actor TTPs.
• Analyse system, network, artefacts and forensic data to identify indicators of compromise that evade automated detection.
• Convert hunt findings into durable detection content (SIEM correlation rules, EDR/NDR queries, SOAR playbooks) to reduce future dwell time.
• Draft clear hunt reports and present findings and recommendations to technical teams, asset owners and senior stakeholders.
• Proactively track the evolving threat landscape to keep hunting capabilities current.

Extended Responsibilities

• Support incident response during confirmed compromises, providing technical context, timelines and containment recommendations.
• Contribute to detection engineering — tuning use cases and reducing false positives in collaboration with the SOC.
• Participate in cybersecurity exercises, tabletop simulations and red/purple team engagements.
• Provide input on risk assessments and mitigation measures.
• Take on cross-functional or emerging tasks as directed — e.g. vulnerability triage, threat intelligence analysis, security awareness input.

Vendor & Stakeholder Collaboration

• Proactively work with vendors and internal stakeholders to achieve the desired outcomes.

Expectations:

• Sense of urgency for all urgent and important matters and accountable to decision made
• Passion to deliver sustainable solutions and continued improvement in control and risk mitigation.
• Good discipline in timely submission and reporting key metrics and status.