Cybersecurity is a critical pillar of CAAS’ work. To ensure that the Singapore air hub remains safe and secure for air travel, every mission-critical system that supports air hub operations must be well-protected and resilient against rapidly evolving, and increasingly complex, cybersecurity threats.

We are looking for strong and dynamic candidates to be part of the cybersecurity threat monitoring and analysis team, within the Cybersecurity and Data Governance Division. Together, you will strengthen the readiness and cybersecurity resilience of both CAAS and the aviation sector, through proactive monitoring and analysis of cybersecurity threats, and further development of such capabilities.

Key responsibilities include:
• Conduct the smooth daily on-premise operations of the Integrated Cybersecurity Defence Centre for the aviation sector, and further develop its capabilities in partnership with internal/external stakeholders;
• Develop and implement standard operating procedures, use cases, frameworks and system architecture for cybersecurity operations, monitoring, detection and response;
• Search, gather and analyse cybersecurity threat intelligence to derive credible intelligence for policy and decision-making by management;
• Ensure that detected cybersecurity threats, risks and vulnerabilities are analysed and addressed promptly;
• Provide regular management updates, incident reports and recommendations as necessary;
• Assist in the coordination of responses and investigation efforts during cybersecurity incidents;
• Keep abreast of the latest industry cybersecurity practices and technologies, as well as emerging threats and vulnerabilities, and recommend appropriate controls and solutions for implementation to enhance the aviation sector’s cybersecurity posture.

Requirements:
• Trained in Cybersecurity, Information Security, Information Technology, Computer Science, Engineering (Computing / Telecommunication) or equivalent;
• At least 2 years of direct and relevant full-time cybersecurity work experience related to development and management/operations of a SOC;
• Possess an active professional certification in Cybersecurity or Information Security from ISACA, (ISC)2 or equivalent will be an advantage;
• Candidates with strong domain knowledge and experience in SOC operations and threat analysis, cybersecurity threat monitoring (OT and IT systems), threat hunting, logs review, network security, machine learning/deep learning will be preferred;
• Self-motivated and independent, a good team player and strong ability to multi-task;
• Curious and passionate about cybersecurity with a hacker mindset; and
• Excellent verbal, written, communication and analytical skills

Note: Your appointment designation will commensurate with your relevant work experience. Successful candidates will be offered a 3-year contract in the first instance, and may be considered for placement on a permanent tenure or subsequent contract renewal.

The Civil Aviation Authority of Singapore's raison d'etre is to develop the air hub and aviation industry in Singapore, expanding Singapore's links to the rest of the world. We enable opportunities through aviation, making connections, opening doors and enabling choices in people's lives.