Penetration Tester - Advanced Cybersecurity Division

About the Role

This position forms part of the Connectivity, Cybersecurity & Resilience (C2R) Group at IMDA, which is dedicated to enhancing the cybersecurity and resilience of Singapore's telecommunications and media sectors. The group aims to keep Singapore's digital networks secure, reliable, and robust in the face of a dynamic and increasingly sophisticated threat landscape.

Key Responsibilities

• Design, develop, and execute comprehensive Penetration Testing programs to detect and mitigate security vulnerabilities within IMDA's digital infrastructure.
• Investigate attacker Tactics, Techniques, and Procedures (TTPs) to continuously refine penetration testing methodologies, tools, and techniques, ensuring assessments align with current threat environments.
• Engage in planning and executing cyber security exercises that simulate real attack scenarios to evaluate and enhance organisational preparedness and incident response.
• Conduct penetration tests collaboratively with asset owners, maintaining controlled, responsible testing with minimal impact on operations.
• Prepare detailed reports outlining findings, recommended solutions, and remediation plans; communicate these effectively to technical personnel and senior management.

Qualifications and Skills

• Educational background in Information Security, Engineering, Computer Science, or related fields.
• At least five years of practical experience in information security, specifically in penetration testing or offensive security roles.
• Holds OSCP or an equivalent industry-recognized offensive security certification.
• Familiarity with network and cloud technologies, with additional advantage in emerging tech such as 5G.
• Analytical and strategic thinker with a strong drive to solve complex cybersecurity problems and keep abreast of the latest threats.
• Excellent communication and interpersonal skills to clearly explain technical results to both technical experts and non-technical stakeholders.