Cyber Threat Hunter, Advanced Cybersecurity Division

[What the role is]

[What you will be working on]

• Proactively identify and mitigate cyber threats to Singapore's digital infrastructure by designing and executing structured threat hunting programmes, reporting to the Advanced Cybersecurity Division lead and collaborating closely with asset owners and security teams across IMDA.
• Design and deliver comprehensive Cyber Threat Hunting programmes, establishing structured methodologies and frameworks to proactively surface hidden threats across Singapore's digital infrastructure.
• Perform end-to-end threat hunting activities, including hypothesis creation, development of targeted search queries, and detailed reporting of findings to drive timely and effective remediation.
• Manage and coordinate threat hunts with asset owners and security teams, ensuring hunts are conducted in a structured, collaborative and operationally responsible manner.
• Analyse system and network logs as well as forensic images to identify indicators of compromise, anomalous behaviours and emerging threat patterns that may pose risks to the organisation.
• Proactively track evolving cyber threats, threat actor profiles and emerging attack techniques to continuously update and enhance the organisation's threat hunting capabilities and intelligence posture.
• Participate in cyber security exercises and provide expert cybersecurity advice on threat vectors, risk assessments and mitigation measures to strengthen organisational cyber resilience.
• Draft comprehensive reports and present findings, threat assessments and actionable recommendations clearly to both technical teams and senior stakeholders.

[What we are looking for]

• Background in Engineering, Computer Science, Information Security or an equivalent discipline.
• Minimum 3 years of hands-on work experience in information security, with demonstrated exposure to threat hunting, digital forensics or incident response functions.
• Possession of relevant GIAC certifications such as GCFA, GCFR or equivalent industry-recognised certifications in forensics and threat analysis.
• Relevant experience in threat hunting and risk assessment would be a distinct advantage, particularly in complex enterprise or critical infrastructure environments.
• Strong analytical mindset with keen attention to detail, and a passion for uncovering hidden threats and solving complex cybersecurity challenges.
• Good communication and interpersonal skills, with the ability to present technical findings and threat intelligence clearly to both technical and non-technical audiences.