Senior Cybersecurity Analyst; Incident Response & Threat

The National Institute of Education (NIE), Singapore, is Singapore’s national teacher education institute and we are proud to be an integral part of the nation’s education service. We play a key role in the preparation of teachers and in the provision of teacher professional and school leadership development programmes. We are committed to our vision of being An Institute of Distinction:
Leading the Future of Education and our mission to Inspire Learning, Transform Teaching and Advance Research. Read more about NIE here.

NIE invites suitable candidates to apply for the position of Senior Cybersecurity Analyst (Incident Response & Threat Hunting) within the Division of Academic Computing & Information Services (ACIS). This is a 3-year contract position.

• Lead the end-to-end incident response lifecycle, including detection, investigation, containment, remediation, and recovery.
• Assess and triage cybersecurity incidents escalated by the managed security service provider (MSSP).
• Conduct and lead investigations across endpoint, identity, network, cloud, and application environments.
• Coordinate incident response activities with internal teams, vendors, MSSP, and external incident response partners.
• Perform proactive and intelligence-led threat hunting to identify emerging threats and suspicious activities.
• Develop and improve detection use cases, monitoring capabilities, and security operations processes.
• Correlate threat intelligence with institutional telemetry and security exposures to identify potential risks.
• Maintain incident response playbooks, investigation procedures, and escalation workflows.
• Plan and conduct cyber incident response exercises, lessons learnt reviews, and resilience validation activities.
• Support the implementation, enhancement, and operationalisation of cybersecurity technologies, automation initiatives, and security projects.

• A University degree in Information Systems, Computer Science, Cybersecurity, or a related discipline.
• Minimum 8 years of IT operations experience where 4 years in incident response, threat hunting, security operations, or cybersecurity investigations.
• Experience leading cybersecurity incident investigations across endpoint, network, identity, cloud, and application environments.
• Hands-on experience with SIEM, EDR, digital forensics, log analysis, threat detection, and security monitoring technologies.
• Knowledge of cyber threat intelligence, attack techniques, incident handling processes, and investigation methodologies.
• Experience developing or improving detection use cases, monitoring capabilities, and incident response procedures.
• Familiarity with cloud security, identity security, and modern attack vectors affecting enterprise environments.
• Experience coordinating incident response activities with service providers, vendors, and cross-functional stakeholders.
• Relevant cybersecurity certifications such as GCIH, GCFA, GCIA, CISSP, SC-200, or equivalent would be advantageous.
• Strong analytical, communication, stakeholder management, and problem-solving skills, with a passion for continuous learning, innovation, security automation, and emerging technologies.

The closing date of the advertisement is 9 November 2026
. We regret that only shortlisted candidates will be notified.

NIE staff can take chartered buses at their own expense from or near their home to the NIE campus. This is subject to the availability of bus routes and seats.