Associate Principal Cyber Threat Intelligence Analyst (Cybersecurity)

Location: Singapore; must be a Singapore citizen with active Security Clearance

Salary: 180,000 SGD, plus competitive equity and a comprehensive benefits plan.

Company

hirify.global provides xOT cybersecurity technology, threat intelligence, and expert services for critical infrastructure.

What you will do

• Support a Singapore government security team with ICS/OT cyber threat intelligence, including national-security priorities.
• Conduct structured and exploratory threat hunts using network traffic, packet captures, industrial protocols, proprietary resources, and commercial tools.
• Establish baseline OT asset and network behaviors across Singapore’s critical infrastructure using hirify.global Platform, Synapse, and complementary tools.
• Contextualize ICS/OT threats, recommend mitigations, and develop expertise in threats affecting the client’s OT environment.
• Translate technical findings into MITRE ATT&CK for ICS mappings, confidence-based assessments, and actionable intelligence products.
• Support incident response engagements and exercises while developing industry-focused ICS/OT CTI content.

Requirements

• Singapore citizenship and active Security Clearance are required.
• At least four years of cyber threat intelligence experience using sources such as NetFlow, open-source intelligence, SIEMs, and malware repositories.
• Hands-on threat hunting experience, including packet capture analysis and industrial protocol inspection.
• Strong expertise in freeform and hypothesis-driven threat hunting methodologies.
• Customer-facing experience with the ability to manage stakeholders independently.
• Strong technical and strategic writing skills, familiarity with threat modeling frameworks such as the Diamond Model, and experience with data aggregation and analysis tools such as Synapse and AI/LLM resources.

Nice to have

• Deep knowledge of ICS/OT threats, industrial technologies such as PLCs, HMIs, and RTUs, adversary TTPs, historical attacks, and industrial network protocols and topologies.
• Ability to scope, develop, and deliver CTI analysis using MITRE ATT&CK for ICS, D3FEND, and the ICS Cyber Kill Chain.

Culture & Benefits

• Remote-first, mission-driven work focused on protecting critical infrastructure.
• Collaboration across delivery teams and a distributed organization spanning North America, Europe, the Middle East, and APAC.
• Competitive equity package.
• Comprehensive benefits plan.
• Background check required for all new hires.