Penetration Tester, Advanced Cybersecurity Division

[What the role is]

• This role sits within the Connectivity, Cybersecurity & Resilience Group
• (C2R) Group. C2R strengthens the cybersecurity and resilience posture of
• the telecommunication and media sectors in Singapore.
• The Group keeps Singapore’s digital connectivity secure,
• trusted, and robust against an evolving and increasingly
• complex threat landscape.

[What you will be working on]

• •Conceptualise, design and deliver end-to-end Penetration Testing programmes to proactively identify and address security vulnerabilities across IMDA's digital infrastructure.
• •Research attacker Tactics, Techniques and Procedures (TTPs) to continuously enhance existing penetration testing techniques, procedures and tools, ensuring assessments remain relevant against the latest threat landscape.
• •Participate in and plan attack scenarios for cyber security exercises, simulating real-world adversarial conditions to test and improve organisational readiness and incident response capabilities.
• •Perform Penetration Testing in close coordination with asset owners, ensuring assessments are conducted in a controlled and responsible manner with minimal disruption to operations.
• •Draft comprehensive reports and present findings, recommendations and remediation strategies clearly to both technical teams and senior stakeholders.

[What we are looking for]

• •Background in Information Security, Engineering, Computer Science or an equivalent discipline.
• •Minimum 5 years of hands-on work experience in information security, with demonstrated experience in penetration testing or offensive security roles.
• •Possession of OSCP certification or equivalent industry-recognised offensive security certification.
• •Experience in networks and cloud technologies would be a distinct advantage, particularly in the context of emerging technologies such as 5G.
• •Strong analytical mindset with a passion for tackling complex cybersecurity challenges and staying ahead of the evolving threat landscape.
• •Good communication and interpersonal skills, with the ability to articulate technical findings clearly to both technical and non-technical audiences.