Cyber Security Researcher (Red Team)

MHA - Internal Security Department (ISD); Singapore; On-site; SGD 60,000 - 90,000; Full time

Job summary

An internal security agency is seeking candidates for roles focused on Cyber Security. Responsibilities include researching vulnerabilities, reverse engineering, and developing exploit code for various systems. Ideal candidates will have a relevant degree and experience in fuzzing and exploit development, as well as a strong interest in Cyber Security. Only Singaporeans are eligible to apply for this fulfilling and impactful career opportunity.

Qualifications

• Degree in Computer Science, Computer/Electrical Engineering, Infocomm Security/Technology or equivalent.
• Strong interest and passion for Cyber Security.
• Familiarity with Operating Systems architecture like Windows and Linux.
• Experience with fuzzing, reverse engineering and exploit development.
• Development experience with C/C++, Python, or Go Lang.

Responsibilities

• Research vulnerabilities in Operating Systems/software/firmware.
• Analyse and reverse engineer code/protocol specifications.
• Investigate modern defenses and validate their effectiveness.
• Develop/validate exploit code for vulnerabilities.
• Research and develop techniques to enhance analysis processes.

Skills

Cyber Security interest

Analytical skills

Interpersonal skills

Education

Degree in Computer Science or related field

Tools

IDA

Ghidra

C/C++

Python

Go Lang

Job description

What the role is:

ISD confronts and addresses threats to Singapore’s internal security and stability. For over 70 years, ISD and its predecessor organisations have played a central role in countering threats such as those posed by foreign subversive elements, spies, racial and religious extremists, and terrorists. A fulfilling and rewarding career awaits those who want to join in ISD’s critical mission of keeping Singapore safe, secure and sovereign for all Singaporeans.

What you will be working on:

• Research vulnerabilities in Operating Systems / software / firmware through white / black / grey box testing
• Analyse and reverse engineer code / protocol specifications of devices, applications and systems to assess security posture and vulnerabilities
• Investigate modern defenses / exploit mitigation techniques against malware and validate their effectiveness against these emerging attacks
• Analyse CVEs / N-day vulnerabilities and develop / validate associated exploit code to demonstrate and determine severity of vulnerability
• Research and develop techniques and tools to enhance analysis processes

What we are looking for:

• Degree in Computer Science, Computer/Electrical Engineering, Infocomm Security/Technology or equivalent competencies
• Strong interest and passion in Cyber Security domain
• Familiarity with major Operating Systems architecture (Microsoft Windows / Linux / Macintosh)
• Experience with fuzzing, reverse engineering and exploit development techniques and tools (e.g. IDA/Ghidra)
• Development experience in programming / scripting (e.g. C/C++/Python/Windows Programming/Go Lang)
• Good interpersonal and communications (written / oral skills)
• Good analytical skills - able to think critically and laterally to distil complex technology concepts and implementations
• Only Singaporeans need apply

About MHA - Internal Security Department (ISD)

The Internal Security Department (ISD) confronts and addresses threats to Singapore’s internal security and stability. For over 75 years, ISD and its predecessor organisations have played a central role in countering threats such as those posed by foreign subversive elements, spies, racial and religious extremists, and terrorists. At the heart of our work are the collection of intelligence that enables us to size up the threats to Singapore’s internal security, and taking the executive actions necessary to overcome those threats. Every day, we collect and analyse intelligence, make impartial assessments, and take decisive action to counter the threats to Singapore’s internal security and stability, and sovereignty.