Senior Cybersecurity Analyst (Incident Response & Threat Hunting)

About the role

The National Institute of Education (NIE) in Singapore is hiring a Senior Cybersecurity Analyst (Incident Response & Threat Hunting) within its Division of Academic Computing & Information Services (ACIS). This is a 3-year contract position focused on leading incident response and proactive threat hunting.

Key responsibilities

• Lead the end-to-end incident response lifecycle, including detection, investigation, containment, remediation and recovery.
• Assess and triage cybersecurity incidents escalated by the managed security service provider (MSSP).
• Conduct and lead investigations across endpoint, identity, network, cloud and application environments.
• Coordinate incident response with internal teams, vendors, MSSP and external incident response partners.
• Perform proactive, intelligence-led threat hunting to identify emerging threats and suspicious activity.
• Develop and improve detection use cases, monitoring capabilities and security operations processes.
• Correlate threat intelligence with institutional telemetry and security exposures to identify potential risks.
• Maintain incident response playbooks, investigation procedures and escalation workflows.
• Plan and run cyber incident response exercises, lessons learnt reviews and resilience validation activities.
• Support the implementation and operation of cybersecurity technologies, automation initiatives and security projects.

Required profile

• University degree in Information Systems, Computer Science, Cybersecurity or a related discipline.
• Minimum 8 years of IT operations experience, including 4 years in incident response, threat hunting, security operations or cybersecurity investigations.
• Experience leading cybersecurity incident investigations across endpoint, network, identity, cloud and application environments.
• Experience coordinating incident response with service providers, vendors and cross-functional stakeholders.
• Certifications such as GCIH, GCFA, GCIA, CISSP or SC-200 are advantageous.

Required skills

• Hands-on experience with SIEM, EDR, digital forensics, log analysis, threat detection and security monitoring.
• Knowledge of cyber threat intelligence, attack techniques, incident handling and investigation methodologies.
• Familiarity with cloud security, identity security and modern attack vectors.
• Strong analytical, communication, stakeholder management and problem-solving skills.