Cyber Security Researcher (Red Team)

About the Role

The Internal Security Department (ISD) has been pivotal in safeguarding Singapore’s internal peace and sovereignty for over 70 years, tackling threats from foreign subversive forces, spies, extremists, and terrorists. This role offers an opportunity to contribute to this vital mission.

Key Responsibilities

• Conduct vulnerability research on operating systems, software, and firmware through white-box, black-box, and grey-box testing methodologies.
• Perform reverse engineering and analyze code and protocol specifications of various devices, applications, and systems to evaluate security vulnerabilities and posture.
• Examine contemporary defensive measures and exploit mitigation strategies deployed against malware and verify their effectiveness against evolving attack techniques.
• Study Common Vulnerabilities and Exposures (CVEs) and zero-day vulnerabilities to develop and validate exploit code, assessing the severity of such vulnerabilities.
• Innovate and build tools and techniques to improve analysis workflows.

Qualifications and Competencies

• A degree in Computer Science, Computer or Electrical Engineering, Infocomm Security or Technology, or equivalent experience.
• A strong drive and enthusiasm for the cyber security domain.
• Understanding of major operating systems architectures including Microsoft Windows, Linux, and Macintosh.
• Hands-on experience with fuzzing, reverse engineering, and exploit development, utilizing tools such as IDA or Ghidra.
• Proficiency in programming and scripting languages like C, C++, Python, Windows Programming, or Go Lang.
• Effective interpersonal communication skills, both written and verbal.
• Strong analytical ability to critically and creatively interpret complex technology concepts and implementations.
• Note: Only Singaporean citizens are eligible to apply.