CyberSecurity Researcher

Csgroup; Singapore; On-site; SGD 90,000 - 130,000; Full time

Job summary

Csgroup is seeking a Security Researcher to conduct security research, vulnerability discovery, and penetration testing across IoT devices, embedded systems, networking gear, and software applications in Singapore.

You will develop proof-of-concept demos, perform root cause analysis, and contribute to product security certifications and compliance assessments. Strong reporting and communication skills are essential.

Qualifications

• Basic understanding of networking, operating systems, and common security concepts.
• Experience with security testing, reverse engineering, vulnerability analysis, Capture-The-Flag (CTF) competitions, bug bounty programs, academic research, or personal security projects.
• Familiarity with security assessment tools such as Burp Suite, Wireshark, Nmap, Ghidra, Binwalk, Frida, IDA Pro, or equivalent.
• Ability to analyse technical problems and independently investigate security issues.
• Ability to prepare clear and concise technical documentation and reports.
• Ability to communicate technical findings to both technical and non-technical stakeholders.

Responsibilities

• Conduct security research on IoT devices, embedded systems, networking equipment, mobile devices, cloud services, and software platforms.
• Perform security assessments and penetration testing using black-box, grey-box, and white-box methodologies.
• Discover, analyse, and validate security vulnerabilities through reverse engineering, fuzzing, protocol analysis, and proof-of-concept development.
• Develop testing methodologies, tools, and automation to improve security assessment capabilities.
• Prepare technical reports and communicate findings to clients, vendors, and stakeholders.

Skills

Security testing

Reverse engineering

Vulnerability analysis

CTF / bug bounty experience

Technical documentation

Stakeholder communication

Tools

Burp Suite

Wireshark

Nmap

Ghidra

Binwalk

Frida

IDA Pro

Job description

The Security Researcher is responsible for conducting security research, vulnerability discovery, penetration testing, and security evaluations of IoT devices, embedded systems, networking equipment, and software applications. The role involves identifying security weaknesses, developing proof-of-concept demo, performing root cause analysis, and contributing to product security certifications and compliance assessments.

Key Responsibilities

• Conduct security research on IoT devices, embedded systems, networking equipment, mobile devices, cloud services, and software platforms.
• Perform security assessments and penetration testing using black-box, grey-box, and white-box methodologies.
• Discover, analyse, and validate security vulnerabilities through reverse engineering, fuzzing, protocol analysis, and proof-of-concept development.
• Develop testing methodologies, tools, and automation to improve security assessment capabilities.
• Prepare technical reports and communicate findings to clients, vendors, and stakeholders.

• Basic understanding of networking, operating systems, and common security concepts.
• Experience with security testing, reverse engineering, vulnerability analysis, Capture-The-Flag (CTF) competitions, bug bounty programs, academic research, or personal security projects.
• Familiarity with security assessment tools such as Burp Suite, Wireshark, Nmap, Ghidra, Binwalk, Frida, IDA Pro, or equivalent.
• Ability to analyse technical problems and independently investigate security issues.
• Ability to prepare clear and concise technical documentation and reports.
• Ability to communicate technical findings to both technical and non-technical stakeholders.