CyberSecurity Researcher

CSGROUP PTE. LTD.; Singapore; On-site; SGD 60,000 - 100,000; Full time

Job summary

CSGROUP PTE. LTD. in Singapore is seeking a skilled Security Researcher to conduct security research, vulnerability discovery, penetration testing, and security evaluations of IoT devices, embedded systems, networking equipment, and software applications.

You will identify weaknesses, develop PoCs, perform root-cause analyses, and contribute to product security certifications and compliance assessments, communicating findings clearly to clients and stakeholders.

Qualifications

• Basic understanding of networking, operating systems, and common security concepts.
• Experience with security testing, reverse engineering, vulnerability analysis, Capture-The-Flag (CTF) competitions, bug bounty programs, academic research, or personal security projects.
• Familiarity with security assessment tools such as Burp Suite, Wireshark, Nmap, Ghidra, Binwalk, Frida, IDA Pro, or equivalent.
• Ability to analyse technical problems and independently investigate security issues.
• Ability to prepare clear and concise technical documentation and reports.
• Ability to communicate technical findings to both technical and non-technical stakeholders.

Responsibilities

• Conduct security research on IoT devices, embedded systems, networking equipment, mobile devices, cloud services, and software platforms.
• Perform security assessments and penetration testing using black-box, grey-box, and white-box methodologies.
• Discover, analyse, and validate security vulnerabilities through reverse engineering, fuzzing, protocol analysis, and proof-of-concept development.
• Develop testing methodologies, tools, and automation to improve security assessment capabilities.
• Prepare technical reports and communicate findings to clients, vendors, and stakeholders.

Skills

Networking basics

Operating systems basics

Security concepts

Tools

Burp Suite

Wireshark

Nmap

Ghidra

Binwalk

Frida

IDA Pro

Job description

TheSecurityResearcheris responsible forconductingsecurityresearch, vulnerability discovery, penetration testing, andsecurityevaluations of IoT devices, embedded systems, networking equipment, and software applications. The role involvesidentifyingsecurityweaknesses, developing proof-of-conceptdemo, performing root cause analysis, and contributing to productsecuritycertifications and compliance assessments.

Key Responsibilities:

• Conductsecurityresearchon IoT devices, embedded systems, networking equipment, mobile devices, cloud services, and software platforms.
• Performsecurityassessments and penetration testing using black-box, grey-box, and white-box methodologies.
• Discover, analyse, andvalidatesecurityvulnerabilities through reverse engineering, fuzzing,protocol analysis,and proof-of-concept development.
• Develop testing methodologies, tools, and automation to improvesecurityassessment capabilities.
• Prepare technical reports and communicate findings to clients, vendors, and stakeholders.

• Basic understanding of networking, operating systems, and commonsecurityconcepts.
• Experience withsecuritytesting, reverse engineering, vulnerability analysis, Capture-The-Flag (CTF) competitions, bug bounty programs, academicresearch, or personalsecurityprojects.
• Familiarity withsecurityassessment tools such as Burp Suite, Wireshark, Nmap,Ghidra,Binwalk, Frida, IDA Pro, or equivalent.
• Ability toanalysetechnical problems and independently investigatesecurityissues.
• Ability to prepare clear and concise technical documentation and reports.
• Ability to communicate technical findings to both technical and non-technical stakeholders.