Vice President, Senior Cyber Threat Analyst (Threat Hunting & Incident Response)

Job Summary

SGX is seeking Cyber Threat Analyst to join the Information Security Team to protect its infrastructure. This role goes beyond conventional threat hunting where the successful candidate will proactively search for hidden and emerging threats across IT environments, while also flexing into adjacent security functions, i.e. threat intelligence, incident response support, detection engineering, and security exercises, as operational needs demand. The role is well suited to a professional who thrives on ambiguity, picks up new tools and domains quickly, and is comfortable moving between deep technical investigation and cross-functional coordination.

Job Responsibilities

Core Threat Hunting

• Design, plan and execute hypothesis-driven threat hunting programs across telemetries.
• Develop hunt hypotheses informed by current threat intelligence, MITRE ATT&CK and critical-infrastructure-specific threat actor TTPs.
• Analyse system, network, artefacts and forensic data to identify indicators of compromise that evade automated detection.
• Convert hunt findings into durable detection content (SIEM correlation rules, EDR/NDR queries, SOAR playbooks) to reduce future dwell time.
• Draft clear hunt reports and present findings and recommendations to technical teams, asset owners and senior stakeholders.
• Proactively track the evolving threat landscape to keep hunting capabilities current.

Extended Responsibilities

• Support incident response during confirmed compromises, providing technical context, timelines and containment recommendations.
• Contribute to detection engineering — tuning use cases and reducing false positives in collaboration with the SOC.
• Participate in cybersecurity exercises, tabletop simulations and red/purple team engagements.
• Provide input on risk assessments and mitigation measures.
• Take on cross-functional or emerging tasks as directed — e.g. vulnerability triage, threat intelligence analysis, security awareness input.

Vendor & Stakeholder Collaboration

• Proactively work with vendors and internal stakeholders to achieve the desired outcomes.

Expectations:

• Sense of urgency for all urgent and important matters and accountable to decision made
• Passion to deliver sustainable solutions and continued improvement in control and risk mitigation.
• Good discipline in timely submission and reporting key metrics and status.

Job Requirements

• Bachelor's degree in Computer Science, Information Security or a related field.
• At least 10 years of relevant experience in threat hunting, SOC operations, incident response or digital forensics.
• Working proficiency in scripting/query languages for large scale log and data analysis.
• Hands-on experience with threat intelligence platforms (TIPs), SIEM and/or EDR/NDR tooling.
• Preferred certifications: CISSP, GCFE, GCFA, GCFR, GCTI, GCIH or equivalent.
• Demonstrate ability to operate in diverse environments and cultures and enjoy working in challenging and fast-paced environment.
• Agile and adaptable — comfortable switching between BAU and urgent, ad-hoc taskings.
• Strong analytical mindset with meticulous attention to detail.
• Clear written and verbal communicator, able to brief both technical and non-technical stakeholders.
• Self-directed learner who stays current with the evolving threat landscape and adversary tradecraft.