SGGOVTERP

Threat Intelligence Analyst

IMD - Mapletree Business City, MBC BLK 10 Full time

[What the role is]

.

[What you will be working on]

Responsibilities

  • Work with a team of Threat Intelligence analysts to maintain situational awareness for Infocomm and Media sectors
  • Keep abreast with related threat groups’ tactics and techniques and produce timely, relevant and accurate cyber intelligence for our stakeholders
  • Recommend and review intelligence requirements, collection sources to support intelligence analysis and production
  • Research cyber threats affecting Telecommunication, Media infrastructure and systems and recommend mitigations to prevent and threat uses case/signature to detect related attacks
  • Produce cyber intelligence products, briefings including specific (ad-hoc) threat report, monthly threat trends, annual threat landscape
  • Support cyber incident investigation, threat and cyber security risk assessment, malware analysis, cyber exercises, with research and analysis
  • Ensure processes are documented and updated

    [What we are looking for]

    Requirements

    • Background in Information Security; or Bachelor’s degree in engineering/Computer Science/Information Security or equivalent
    • 5 years or more experience as Threat Intelligence analyst, with 1 year or more experience leading the team
    • Experience preparing and presenting threat briefings to information security and technology stakeholders in senior management, operations and to customers
    • Experience publishing cyber threat or vulnerability research, writing cyber incident or threat assessment report, with MITRE ATT&CK tactics and techniques, indicators of attack/compromise and mitigations recommended
    • Proficiency in Threat Intelligence Platforms and integrations with security solutions
    • Knowledge in telecommunications, broadcast, media equipment and technologies, enterprise environments
    • Experience with network traffic/log analysis, computer/mobile forensics or malware analysis
    • Experience creating and improving threat detection query in Endpoint Detection and Response system is advantageous
    • Knowledge of network and operating systems (Windows, Linux) security, cloud architecture or application security
    • Relevant professional certifications including CREST CCTIM, CRTIA, CPTIA, GIAC GCFA, GREM, GCFE or GCIH
    • Strong analytical skills with passion to overcome challenges
    • Good communication and interpersonal skills