Cyber Threat Hunter

[What the role is]

Keeping the Infocomm and Media sectors secure and resilient through policies, regulations and technical capabilities.
The Advanced Cybersecurity Division is at the forefront of safeguarding Singapore's digital economy. Singapore's economy is digitalising, and an effective wireless communications infrastructure is key to support Singapore's digital economy. As a member of the Advanced Cybersecurity Division, you will be applying your expertise in Cybersecurity to support various operational and developmental activities, with strong focus on emerging technologies such as 5G and Cloud. The Threat Hunting Specialist plays a pivotal role in proactively detecting and neutralising cyber threats before they materialise, working alongside a team of cybersecurity professionals to strengthen the resilience of Singapore's critical digital infrastructure.

[What you will be working on]

• Proactively identify and mitigate cyber threats to Singapore's digital infrastructure by designing and executing structured threat hunting programmes, reporting to the Advanced Cybersecurity Division lead and collaborating closely with asset owners and security teams across IMDA.
• Design and deliver comprehensive Cyber Threat Hunting programmes, establishing structured methodologies and frameworks to proactively surface hidden threats across Singapore's digital infrastructure.
• Perform end-to-end threat hunting activities, including hypothesis creation, development of targeted search queries, and detailed reporting of findings to drive timely and effective remediation.
• Manage and coordinate threat hunts with asset owners and security teams, ensuring hunts are conducted in a structured, collaborative and operationally responsible manner.
• Analyse system and network logs as well as forensic images to identify indicators of compromise, anomalous behaviours and emerging threat patterns that may pose risks to the organisation.
• Proactively track evolving cyber threats, threat actor profiles and emerging attack techniques to continuously update and enhance the organisation's threat hunting capabilities and intelligence posture.
• Participate in cyber security exercises and provide expert cybersecurity advice on threat vectors, risk assessments and mitigation measures to strengthen organisational cyber resilience.
• Draft comprehensive reports and present findings, threat assessments and actionable recommendations clearly to both technical teams and senior stakeholders.

[What we are looking for]

• Background in Engineering, Computer Science, Information Security or an equivalent discipline.
• Minimum 3 years of hands-on work experience in information security, with demonstrated exposure to threat hunting, digital forensics or incident response functions.
• Possession of relevant GIAC certifications such as GCFA, GCFR or equivalent industry-recognised certifications in forensics and threat analysis.
• Relevant experience in threat hunting and risk assessment would be a distinct advantage, particularly in complex enterprise or critical infrastructure environments.
• Strong analytical mindset with keen attention to detail, and a passion for uncovering hidden threats and solving complex cybersecurity challenges.
• Good communication and interpersonal skills, with the ability to present technical findings and threat intelligence clearly to both technical and non-technical audiences.