Threat Intelligence Analyst - Connectivity, Cybersecurity & Resilience

About the Role

This position is a pivotal part of the Connectivity, Cybersecurity & Resilience (C2R) Group, tasked with fortifying the cybersecurity and resilience of Singapore’s telecommunication and media sectors. The Group’s mission is to safeguard the nation’s digital connectivity, making it secure, trustworthy, and resilient against a dynamic and complex range of cyber threats.

Key Responsibilities

• Collaborate with fellow Threat Intelligence analysts to maintain a comprehensive understanding of relevant threats impacting the Infocomm and Media sectors, monitoring threat actors' tactics and techniques to deliver timely, precise cyber intelligence to stakeholders.
• Assess and suggest intelligence requirements and data collection methods to underpin intelligence analysis and output; conduct research on cyber threats targeting telecommunication and media infrastructures and systems to advise appropriate mitigations and develop detection methods such as threat use cases and signatures.
• Produce a variety of cyber intelligence materials, including targeted ad-hoc threat reports, monthly threat trend summaries, and annual threat landscape analyses, all ensuring accuracy, relevance, and actionability.
• Provide expert support during cyber incident investigations, conduct threat and cybersecurity risk assessments, malware analysis, and participate in cyber exercises, utilizing frameworks such as MITRE ATT&CK to analyze tactics, techniques, indicators of attack or compromise, and countermeasures.
• Maintain and update documentation of processes and contribute towards ongoing enhancement of threat detection methods, including crafting threat detection queries for Endpoint Detection and Response (EDR) systems.

Candidate Profile and Requirements

• Academic background in Information Security, Computer Engineering, Computer Science, or a related discipline, accompanied by 3 to 5 years or more of professional experience as a Threat Intelligence Analyst.
• Proven capability in preparing and delivering threat intelligence briefings at various organizational levels including senior management, operational teams, and customer groups.
• Experience producing and publishing cyber threat or vulnerability research, and composing cyber incident or threat assessment reports that incorporate MITRE ATT&CK frameworks, indicators of attack or compromise, and recommended mitigations.
• Familiarity with Threat Intelligence Platforms and integration of these platforms with security solutions; strong understanding of telecommunication, broadcast, media technologies and enterprise environments.
• Background in analyzing network traffic/logs, performing computer and mobile forensics, or malware analysis; knowledge of network and operating system securities including Windows and Linux, cloud architecture, and application security is advantageous.
• Possession of relevant certifications is highly valued, such as CREST CCTIM, CRTIA, CPTIA, GIAC GCFA, GREM, GCFE, or GCIH.
• Exceptional analytical abilities, strong motivation to solve challenges, and excellent communication and interpersonal skills to effectively engage a diverse range of stakeholders.