Digital Security Researcher

Internal Security Department; Singapore; On-site; SGD 90,000 - 150,000; Full time

Job summary

Internal Security Department seeks a candidate to join the Digital Security team to conduct red teaming as part of white-hat penetration testing. You will identify vulnerabilities in systems, endpoints and wireless networks and propose mitigations.

The role requires familiarity with Python, Linux-based environments and security research, with opportunities to develop tooling and stay current on threat trends.

Qualifications

• Strong programming experience, and familiarity with scripting languages such as Python.
• Knowledge of Linux-like operating systems.
• Knowledge of threat intelligence concepts and network security.

Responsibilities

• As a member of the Digital Security team, perform red teaming exercises as part of white-hat penetration testing.
• Identify vulnerabilities in systems, endpoints and wireless communications and propose mitigations.
• Develop and maintain proficiency in tools and techniques for red teaming and security research.
• Articulate risks and provide written descriptions of security defects and remediation steps.

Skills

Python

Linux

Network security

Threat intelligence

Red teaming

Tools

Docker

Job description

What The Role Is

ISD confronts and addresses threats to Singapore’s internal security and stability. For over 75 years, ISD and its predecessor organisations have played a central role in countering threats such as those posed by foreign subversive elements, spies, racial and religious extremists, and terrorists. A fulfilling and rewarding career awaits those who want to join in ISD’s critical mission of keeping Singapore safe, secure and sovereign for all Singaporeans.

What The Role Is

ISD confronts and addresses threats to Singapore’s internal security and stability. For over 75 years, ISD and its predecessor organisations have played a central role in countering threats such as those posed by foreign subversive elements, spies, racial and religious extremists, and terrorists. A fulfilling and rewarding career awaits those who want to join in ISD’s critical mission of keeping Singapore safe, secure and sovereign for all Singaporeans.

What You Will Be Working On

As a member of the Digital Security team, you will be responsible for working closely with internal stakeholders to perform red teaming exercises as part of white-hat penetration testing on systems to ensure developed systems are secured and hardened according to organizational and industrial standards.

• For defensive purposes, perform red teaming assessments using proprietary and open-source tools to identify vulnerability of developed systems and endpoint devices and wireless communications (WIFI, Bluetooth and IoT)
• Develop, conduct research on, and maintain proficiency in tools, techniques and vulnerabilities trends for red teaming
• Understand and identify possible digital fingerprints, critical information, data and processes that must be protected in the context of system and network attack surface
• Provide written and verbal description of the identified security defects identified, articulate risks and propose mitigation measures

What We Are Looking For

• Applicants with no experience may apply
• Ability to work independently as well as in a team setting
• Relevant experience or knowledge in one or more of the following areas would be advantageous:
• Strong programming experience, and familiarity with scripting languages such as Python
• Knowledge of and familiarity with Linux-like operating systems
• Knowledge of processes, procedures and methods to research, analyse and disseminate threat intelligence information
• Knowledge of tools used for network security analysis
• Knowledge of network concepts
• Wide Knowledge of server technologies including commonly used web servers, database servers, cloud storage and server-to-server secured network communications
• Reverse engineering experience in mobile applications, micro-services and Docker
• Only Singaporeans need apply We wish to inform that only shortlisted candidates will be notified.