Lead, Cybersecurity Operations Specialist

About the role

Singpass, within GovTech, provides reliable digital identity for Singapore and aims to streamline transactions, enable businesses and protect against fraud. As a Lead Cybersecurity Operations Specialist, you will independently drive security strategy and operations that protect public services, in a complex and fast-moving threat environment.

Key responsibilities

• Determine which security problems are worth solving and choose approaches that reduce risk and deliver resilience for users and systems.
• Shape the strategic direction of cybersecurity capabilities and prioritise initiatives based on the threat landscape, resources and risk appetite.
• Work with engineering, product, policy and product operations teams to embed security across the full lifecycle of digital services.
• Measure and track security operations effectiveness, from detection coverage to response times and risk reduction.
• Lead incident response or threat hunts, review architecture decisions, guide junior analysts and shape new detection capabilities.
• Build a culture of security ownership and collaboration.
• Take end-to-end ownership of key security domains, translating threat intelligence, operational findings and policy requirements into security investments.
• Drive security capabilities from design to sustained operations, defining detection strategies, response playbooks and tooling roadmaps.
• Define security metrics, evaluate trade-offs and prioritise initiatives that deliver the most meaningful risk reduction.
• Guide day-to-day and crisis cybersecurity operations, mentoring the team through incidents.
• Partner with software engineers and product managers to embed security early in architecture decisions.
• Communicate risk and security strategy clearly to cross-functional teams and senior leadership.

Required profile

• 10+ years of experience in cybersecurity, with 3 years or more as a full-time SOC analyst, threat hunter or in a related discipline.
• Demonstrated experience leading security teams and driving strategic security initiatives end-to-end.
• Proven ability to lead incident response for complex, high-stakes security events.
• Experience influencing stakeholders and collaborating across engineering, product and policy teams, including at the senior leadership level.
• Track record of operating with high autonomy in fast-moving environments.

Required skills

• Hands-on software engineering experience, able to read, review and reason about code and system architecture in the context of security.
• Professional certifications such as GMON, GCTD, GCFA, GNFA, GCFR, GCTI, GCIA, OSCP or other relevant ones.
• Operational experience building or maturing security operations capabilities, including EDR, NDR, SIEM, SOAR, threat intelligence or detection engineering.

What we offer

• A total rewards package with leave benefits and employee wellness programs.
• Flexible work arrangements (subject to the job role).