Digital Security Researcher

MHA - Internal Security Department (ISD); Singapore; On-site; SGD 50,000 - 73,000; Full time

Job summary

The Internal Security Department (ISD) of Singapore seeks a candidate to join the Digital Security team and perform white-hat red-teaming on systems to ensure secure designs and hardened deployments. You will work independently and as part of a team, using Python, Linux-based environments, and Docker to identify vulnerabilities and report risks.

Applicants with varying levels of experience are welcome; the role emphasizes learning, collaboration, and the ability to analyze threats while working

Qualifications

• Strong programming experience or familiarity with scripting languages (Python).
• Knowledge of Linux-like operating systems and networking concepts.
• Experience or knowledge in threat intelligence, red teaming, and security assessment tools.

Responsibilities

• Perform red teaming assessments to identify vulnerabilities in systems and endpoints.
• Research and maintain proficiency in red-teaming tools, techniques, and vulnerability trends.
• Describe security defects, articulate risks, and propose mitigation measures.

Skills

Python programming

Linux knowledge

Threat intelligence

Networking concepts

Reverse engineering

Tools

Docker

Network security analysis tools

Penetration testing tools

Job description

What the role is:

ISD confronts and addresses threats to Singapore’s internal security and stability. For over 75 years, ISD and its predecessor organisations have played a central role in countering threats such as those posed by foreign subversive elements, spies, racial and religious extremists, and terrorists. A fulfilling and rewarding career awaits those who want to join in ISD’s critical mission of keeping Singapore safe, secure and sovereign for all Singaporeans.

What you will be working on:

As a member of the Digital Security team, you will be responsible for working closely with internal stakeholders to perform red teaming exercises as part of white-hat penetration testing on systems to ensure developed systems are secured and hardened according to organizational and industrial standards.

• For defensive purposes, perform red teaming assessments using proprietary and open-source tools to identify vulnerability of developed systems and endpoint devices and wireless communications (WIFI, Bluetooth and IoT)
• Develop, conduct research on, and maintain proficiency in tools, techniques and vulnerabilities trends for red teaming
• Understand and identify possible digital fingerprints, critical information, data and processes that must be protected in the context of system and network attack surface
• Provide written and verbal description of the identified security defects identified, articulate risks and propose mitigation measures

What we are looking for:

• Applicants with no experience may apply
• Ability to work independently as well as in a team setting
• Relevant experience or knowledge in one or more of the following areas would be advantageous:- Strong programming experience, and familiarity with scripting languages such as Python- Knowledge of and familiarity with Linux-like operating systems- Knowledge of processes, procedures and methods to research, analyse and disseminate threat intelligence information- Knowledge of tools used for network security analysis- Knowledge of network concepts- Wide Knowledge of server technologies including commonly used web servers, database servers, cloud storage and server-to-server secured network communications- Reverse engineering experience in mobile applications, micro-services and Docker

Only Singaporeans need apply

We wish to inform that only shortlisted candidates will be notified.

About MHA - Internal Security Department (ISD)

The Internal Security Department (ISD) confronts and addresses threats to Singapore’s internal security and stability. For over 75 years, ISD and its predecessor organisations have played a central role in countering threats such as those posed by foreign subversive elements, spies, racial and religious extremists, and terrorists.At the heart of our work are the collection of intelligence that enables us to size up the threats to Singapore’s internal security, and taking the executive actions necessary to overcome those threats. Every day, we collect and analyse intelligence, make impartial assessments, and take decisive action to counter the threats to Singapore’s internal security and stability, and sovereignty.