Cyber Security Operations Offensive Specialist

Mercedes-Benz Singapore; Singapore; On-site; SGD 140,000 - 170,000; Full time

Job summary

Mercedes-Benz Singapore is seeking a Cyber Security Operation Offensive Specialist for a two-year contract based in Singapore. You will join the Global Cyber Security team with the CIRC and work with global peers across EMEA and NAFTA to defend assets and services.

You will drive AI-assisted vulnerability detection, triage, remediation tracking, and automation, while coordinating with asset owners and regional IT teams to ensure timely remediation and reporting.

Qualifications

• Degree from a reputable university or significant IT coursework.
• 5+ years in offensive cybersecurity in corporate, military, or law enforcement.
• Certifications such as OSCP, OSCE, CREST, SANS GIAC Penetration Tester or similar are beneficial.

Responsibilities

• Lead AI-assisted vulnerability detection and triage across assets and services.
• Manage vulnerability ticketing, lifecycle, and remediation coordination with stakeholders.
• Develop AI-enabled workflows and automate repetitive security tasks.
• Collaborate with CIRC and global teams to improve vulnerability management processes.

Skills

Excellent communicator

Team collaboration

Self-motivated

Under pressure

English fluency

Education

Degree in Computer Science / IT or related field

Tools

Qualys

ServiceNow Vulnerability Response

Job description

Join Mercedes-Benz’s Global Cyber Security team and make a real impact! We are seeking a passionate and talented Cyber Security Operation Offensive Specialist for a dynamic 2-year contract (renewable) based in Singapore. This is a unique opportunity to work directly with Mercedes-Benz Singapore, collaborating with our talented Cyber Intelligence and Response Centre (CIRC) and global teams across EMEA and NAFTA. This position is offered through an agency and will be fully integrated into our security operations - playing a key role in protecting one of the world’s most iconic brands. If you thrive in an exciting international environment and are ready to take your career to the next level, we want to would like to hear from you.

Key Responsibilities

Providing an intelligence and AI-driven approach towards vulnerability detection, triage and remediation tracking affecting any Mercedes-Benz owned or related assets and services, applying agentic AI tooling and automation to accelerate the handling of inbound vulnerability findings, scan results and threat intelligence, and providing coordination and follow-through towards affected asset owners so as to enable speedy remediation and a return to business-as-usual status. Further, the role will require the candidate to build, operate and continuously improve AI-assisted workflows across the Global Vulnerability Detection (GVD) and Vulnerability Alerting Process (VAP) pipelines — covering finding intake and correlation, ticket creation and lifecycle management in ServiceNow, monitoring of US and Chinese vulnerability sources, and coordination with internal and external stakeholders — while participating in global cybersecurity projects and operational improvements, and supporting the mitigation of identified threats, attack vectors and architectural weaknesses.

This role will contribute to maintaining a secure and resilient environment by proactively identifying, assessing, and mitigating security risks while collaborating with global teams to drive AI-augmented cybersecurity operation and continuous improvement in cybersecurity practices.

1. Vulnerability Alerting Process (VAP) & AI-Driven Threat Intelligence

• VAP — AI-assisted vulnerability intelligence and alerting — monitor US (NVD/CISA KEV) and Chinese (CNNVD /CNVD) sources;
• Run the AI triage pipeline;
• Apply severity, exploitability and asset-context signals to propose prioritization and issue alerts for regional assets.

2. Global Vulnerability Detection (GVD) Operations

• Manage GVD daily triage and incident lifecycle — process the inbound Global Vulnerability Detection queue (scan findings, exposure alerts, third-party notifications);
• Correlate findings against existing tickets and assets, incidents and remediation records;
• Create, update, link or dismiss ServiceNow tickets and incidents;
• Track vulnerabilities throughout their lifecycle until successful remediation and verified closure.
• Maintain accurate records, documentation and audit trails.

3. Vulnerability Remediation Coordination and Escalation

• Coordinate and engage asset owners, regional IT teams and subsidiary contacts to drive remediation activities;
• Provide guidance on containment, mitigation and remediation fix options;
• Escalate stalled or materially exposed items;
• Coordinate with Cyber Incident Response (CIRC) teams when vulnerabilities evolve into active security incidents

4. Process Automation and Operational Improvement

• Identify repetitive and manual work activities suitable for automation;
• Propose and pilot AI-enabled workflows improvements to increase operational efficiency;
• Document workflows, contribute to operational playbooks and runbooks;
• Contribute to knowledge transfer within the regional cybersecurity team.
• Drive continuous improvement across vulnerability management processes.

Qualifications

• Degree from a reputable university or significant course work in Computer Science, Information Technology or other IT-related fields of study.
• One or more of the following professional certification is beneficial: OSCP, OSCE, CREST, SANS GIAC Penetration Tester, Web Application Penetration Tester, Exploit Researcher, Advanced Penetration Tester or similar.
• 5+ years working experience in technical offensive cyber security related field in a corporate, military, or law enforcement environment.
• Honest, Professional, strong team influencer, able to proactively support team culture that fosters knowledge sharing, excellence and collaboration.
• Able to work under pressure, facilitate discussion, decision-making, and conflict resolution.
• Excellent communicator, able to engage and effectively respond to diverse stakeholders.
• Fluency in the English Language, with excellent verbal and written communication skills.
• Self-motivated with the ability to carry out assigned tasks with minimum supervision.
• Proficient understanding of networking and network security technologies.
• Good understanding of Threat Intelligence utilization towards new Vulnerability Detection.
• Excellent knowledge of cyber security standards, risks, threats, prevention measures and best practices.
• Experiences in improving a vulnerability management process and/or a vulnerability-scanning concept.
• Demonstrated use of AI tooling — AI coding assistants or LLM agents — to produce something, together with a clear-eyed sense of where and how such tools fail.
• Hands-on experience with vulnerability scanning and management processes and tools (Qualys and ServiceNow Vulnerability Response).
• Experience with Vulnerability Management in cloud solutions.
• Experience with Vulnerability Management Lifecycle.
• Good understanding of various operating systems.
• Good understanding of the Cyber Kill Chain and the ability to display clear analytical skills.

Additional Information

• Open to candidates at all experience levels; responsibilities will be tailored accordingly.
• Only shortlisted candidates will be contacted.