Head, Cyber Threat Hunting, Tech Ops, xCyber

HTX is Singapore's Science and Technology agency that brings together diverse scientific and engineering capabilities to develop transformative, operationally ready solutions for public safety. As a statutory board under the Ministry of Home Affairs, HTX works at the forefront of science and technology to empower the Home Team with cutting-edge capabilities. Guided by our mission to amplify, augment and accelerate the Home Team's advantage, we are committed to keeping Singapore the safest place on planet Earth. The jobholder will be a member of xCybersecurity, lead and develop Cyber Threat Hunting (CTH) capabilities for MHA and HTX. This will broadly require the job holder to lead a team of technical specialised with deep knowledge in cyber threat hunting to support HTX and HTDs on strategic decision-making on attack surface or threat exposure during peace and crisis times and enhance the protection and resilience of MHA systems. Responsibilities As Head, Cyber Threat Hunting, you will be required to: • To enhance the protection and resilience of MHA Critical and Significant Information Infrastructures (CIIs/SIIs) with proactive hunting of advanced persistent cyber threats • Serve as Subject matter experts in cyber threat hunting during times of crisis. • Develop a ready in-house CTH team to step up for DFIR during times of crisis. • Work with wider Government and industry/strategic partners in Threat Hunting, as well as supporting investigation in digital forensics, if required. • Development of threat management framework and threat modelling to provide senior management on the security risk posture of MHA and HTX. Requirements • A bachelor’s degree in Computer Science, Information Technology, or related Engineering fields • At least 10 years of experience in a relevant field (CTH/DFIR/SOC domain), with a minimum of 5 years hands-on experience in cyber threat hunting, cyber threat intelligence and DFIR. • Professional cybersecurity qualifications such as ENCE/GCFA/GCIA/GREM/GCTI/GNFA is preferred • Ability to provide strong technical guidance on investigation and technical assessment. • Hands-on experience with SIEM/security analytics use-cases • Hands-on experience with digital forensics, threat intelligence, SIEM and malware analysis tools • Strong knowledge of cybersecurity kill-chain processes, threat response, incident response, MITRE ATT&CK framework and cybersecurity incident management. • Advanced understanding of Windows and Unix/Linux infrastructure and system. • Situational awareness of latest cyber threats All new hires are appointed on a two-year contract in the first instance and will be assessed and considered for permanent tenure over time, based on performance. As part of the shortlisting process for this role, you may be required to complete a medical declaration and/or undergo further assessment. All shortlisted applicants will be updated on the status of their applications within 4 weeks upon closing of the advertisement. #LI-NL2