Head, Cyber Threat Intelligence, Tech Ops, xCyber

What The Role Is

HTX is Singapore's Science and Technology agency that brings together diverse scientific and engineering capabilities to develop transformative, operationally ready solutions for public safety. As a statutory board under the Ministry of Home Affairs, HTX works at the forefront of science and technology to empower the Home Team with cutting-edge capabilities. Guided by our mission to amplify, augment and accelerate the Home Team's advantage, we are committed to keeping Singapore the safest place on planet Earth.

The job holder will support the Deputy Director (Technical Operations) in leading and developing Cyber Threat Intelligence (CTI) capabilities for the Ministry of Home Affairs (MHA) and the Home Team Science and Technology Agency (HTX).

This role is responsible for building and leading a specialised cyber threat intelligence team to provide timely, actionable intelligence and risk assessments that support strategic decision‑making during both peacetime and crisis situations. The role contributes directly to strengthening the protection, resilience, and security posture of MHA's digital systems and networks.

What You Will Be Working On

As Head, Cyber Threat Intelligence, you will be required to:

Cyber Threat Intelligence Capability Development

• Lead and develop a high performing cyber threat intelligence team with deep technical expertise in threat intelligence, threat modelling, and adversary analysis.
• Establish and enhance cyber threat intelligence frameworks, methodologies, and threat management models to assess and communicate security risks to senior management.
• Provide strategic cyber threat intelligence and informed impact assessments to support HTX and Home Team Departments (HTDs) in decision making related to attack surfaces and threat exposure.
  
  

Strategic Advisory and Crisis Support

• Serve as a subject matter expert in cyber threat intelligence during crisis situations, providing timely and credible intelligence to support operational and strategic responses.
• Deliver early warning and detection of emerging cyber threats, including sector specific and nation state threats relevant to MHA and HTX.
• Produce timely threat analysis, intelligence assessments, and briefings for senior leadership.
  
  

Stakeholder Engagement and Collaboration

• Work closely with HTDs, internal stakeholders, and senior management to provide sense making of the overall cybersecurity posture across MHA systems.
• Collaborate with wider Government agencies, industry partners, and strategic counterparts on cyber threat intelligence sharing and joint analysis efforts.
• Contribute to whole of government cybersecurity intelligence initiatives and cross sector threat assessments.
  
  

What We Are Looking For

• Degree in Computer Science, Information Technology, or related Engineering discipline; GCTI is preferred, and other relevant certifications, including ENCE, GCFA, GCIA, GREM, and GNFA, will also be taken into consideration.
• At least 8 years of relevant experience in Cyber Threat Intelligence (CTIH), Digital Forensics and Incident Response (DFIR), and/or SOC environments, including 5 years of hands-on CTIH/DFIR experience.
• Strong technical leadership in cyber investigations, threat intelligence, and incident response.
• Knowledge of cyber kill chain processes, MITRE ATT&CK framework, and cybersecurity incident management.
• Proven ability to drive strategic capability development and communicate complex intelligence to senior stakeholders.
• High integrity, resilience, strong leadership and communication skills, with a positive and learning oriented mindset.
  
  

All new hires are appointed on a two-year contract in the first instance and will be assessed and considered for permanent tenure over time, based on performance.

As part of the shortlisting process for this role, you may be required to complete a medical declaration and/or undergo further assessment.

All shortlisted applicants will be updated on the status of their applications within 4 weeks upon closing of the advertisement.