Penetration Tester, Advanced Cybersecurity Division

About the Role

This position is part of the Connectivity, Cybersecurity & Resilience (C2R) Group, which focuses on reinforcing the cybersecurity and robustness of the telecommunication and media sectors within Singapore. The Group is dedicated to safeguarding the nation's digital connectivity against an ever-changing and sophisticated threat environment.

Key Responsibilities

• Design, develop, and implement comprehensive Penetration Testing programs to proactively discover and mitigate security weaknesses in IMDA’s digital assets.
• Investigate attacker tactics, techniques, and procedures (TTPs) to continually upgrade penetration testing methodologies, tools, and processes, ensuring they stay effective amid emerging cyber threats.
• Engage in planning and execution of cyber security exercises that simulate realistic attack scenarios to evaluate and enhance organizational preparedness and incident response mechanisms.
• Conduct Penetration Testing collaboratively with asset owners, maintaining strict control to minimize operational disruptions.
• Compile detailed reports and effectively communicate findings, suggested remediation, and risk mitigations to technical teams as well as senior leadership.

Candidate Profile

• Educational background in Information Security, Engineering, Computer Science, or a related field.
• At least 5 years of practical experience in information security, specializing in penetration testing or offensive security roles.
• Holds OSCP certification or other recognized certifications in offensive security.
• Experience working with network and cloud technologies is highly beneficial, especially with newer technologies such as 5G.
• Possesses strong analytical capabilities and demonstrates enthusiasm for addressing complex cybersecurity issues and adapting to evolving threats.
• Excellent communication and interpersonal skills, able to clearly explain technical results to diverse stakeholders.