Cyber Security Vulnerability Researcher (Web Applications)

Centre for Strategic Infocomm Technologies (CSIT); Singapore; On-site; SGD 60,000 - 120,000; Full time

Job summary

Centre for Strategic Infocomm Technologies (CSIT) in Singapore is hiring security researchers to conduct in-depth analysis of web application architectures, identify flaws and weaknesses that could be exploited by malware, and contribute to secure design practices.

You will perform vulnerability research, penetration testing, code auditing, and malware analysis, with opportunities for both senior and entry-level candidates. Only Singapore Citizens will be considered.

Qualifications

• Degree or professional qualification in Infocomm Security, CS, IT or equivalent.
• Knowledge in web programming languages and penetration testing is advantageous.

Responsibilities

• Research web app architectures to identify flaws that malware could exploit.
• Conduct security assessments: vulnerability research, pentesting, code auditing, malware analysis.

Skills

Strong problem-solving

Troubleshooting

Analytical thinking

Education

Degree or equivalent in Infocomm Security / CS / IT

Tools

PHP

Java

JavaScript

.NET

Penetration testing

Job description

Job Scope

• Conduct research and analysis to gain in-depth understanding of web application architectures to discover implementation flaws and weaknesses within these applications which could be exploited by malware.
• Perform information security assessments through vulnerability research, penetration testing, code auditing, black box testing, reverse engineering, proof‑of‑concept simulations and malware analysis.

Requirements

• A degree or professional qualification in Infocomm Security, Computer Science, Computer/Electrical Engineering, Information Technology, Mathematics or equivalent
• Strong interest and passion for the field of Infocomm security
• Strong problem‑solving and troubleshooting skills
• Creative, innovative, self‑motivated and independent
• Knowledge in web programming languages (e.g. PHP, Java, Javascript, .net) and penetration testing would be an added advantage
• Senior and entry‑level positions available

As CSIT is an agency under the Ministry of Defence (Singapore), only Singapore Citizens will be considered.

We may use artificial intelligence (AI) tools to support parts of the hiring process, such as reviewing applications, analyzing resumes, or assessing responses. These tools assist our recruitment team but do not replace human judgment. Final hiring decisions are ultimately made by humans.