Senior Cybersecurity Consultant / Manager (Protective DNS), SCD

As Singapore harnesses technology to improve lives and livelihoods for all, it is imperative that our plans are built on a strong foundation of cybersecurity, without which we would be exposing ourselves to the multitude of threats that lurk in cyberspace. The Safer Cyberspace Division in CSA focuses on building national cyber resilience of organisations in Singapore. The division develops and manages national cybersecurity technology initiatives under the SG Cyber Safe programme, in order to enable a safer cyberspace. Examples of programmes which the division has rolled out include the CSA Cyber Essentials and Cyber Trust mark, which are published as national cybersecurity standards in Singapore. The target segment of the division are non-Critical Information Infrastructure (CII) organisations in Singapore, and these can range from large or significant organisations of special interest to Small and Medium Enterprises (SMEs), which form 99% of Singapore’s economy. We are looking for a candidate to deploy and manage cybersecurity projects that enables security-by-default through protective Domain Name Service (DNS). The goal is to provide protection to organisations and/or individuals in Singapore upstream. The project is currently in pre-deployment phase, and upon completion of deployment, the role will evolve to the responsibilities indicated in the post-deployment phase: Cyber threat intelligence for use in the intended infrastructure • Pre-deployment phase: Identify, curate and acquire appropriate sources of threat intelligence from technology vendor(s) • Post-deployment phase: Develop metrics for, monitor and measure efficacy of threat intelligence, in alignment to technical and/or regulatory thresholds Distribution of cyber threat intelligence • Pre-deployment phase: Work with other Government agency counterparts to define requirements and assess appropriate architecture of Government-hosted systems • Post-deployment phase: Day-to-day operations support, where applicable Deployment of cyber threat intelligence through intended infrastructure • Pre-deployment phase: Work with other Government agency counterparts, counterparts in the telecommunications or Internet service provider and the technology vendor(s) to trial the efficacy of the cyber threat intelligence in the intended infrastructure • Post-deployment phase: Day-to-day operations support, where applicable • Background in Communications, Cybersecurity, Engineering, Computer Science, Infocomm Technology, or a related field • Good knowledge of the applicability of threat intelligence feeds that are suited for use in telecommunications or Internet infrastructure • Good knowledge of core Internet technologies and protocols, e.g. DNS, Border Gateway Protocol (BGP) • Network planning or operations experience in a carrier-grade network environment, such as in a telecommunications or Internet service provider, or vendor, is an advantage • At least 2 years’ experience deploying or managing technology systems in a Government-secured environment • Strong technology project management skills, including technology vendor management • Strong analytical and communication skills, both verbal and written • Strong interpersonal and stakeholder management skills, with the confidence to engage and manage technical and/or regulatory counterparts in telecoms or Internet service providers