Digital Security Researcher

Internal Security Department; Singapore; On-site; SGD 28,000 - 39,000; Full time

Job summary

Internal Security Department in Singapore invites individuals to contribute to red teaming and defensive security work. You will identify vulnerabilities in systems, endpoints and IoT, using a mix of proprietary and open-source tools to assess risk and resilience.

The role emphasizes documentation of defects, clear risk articulation and practical mitigations. Applicants with no experience may apply; familiarity with Python, Linux, networking and server technologies is advantageous.

Qualifications

• Applicants with no experience may apply.
• Ability to work independently or in a team.
• Strong programming experience and Python familiarity.
• Knowledge of Linux-like operating systems.
• Knowledge of threat intelligence, network security and servers.

Responsibilities

• For defensive purposes, perform red teaming assessments using proprietary and open-source tools to identify vulnerability of developed systems and endpoint devices and wireless communications (WIFI, Bluetooth and IoT)
• Develop, conduct research on, and maintain proficiency in tools, techniques and vulnerabilities trends for red teaming
• Understand and identify possible digital fingerprints, critical information, data and processes that must be protected in the context of system and network attack surface
• Provide written and verbal description of the identified security defects identified, articulate risks and propose mitigation measures

Skills

Programming

Python

Linux

Threat intelligence

Network security

Server technologies

Reverse engineering

Tools

Docker

Job description

What The Role Is

ISD confronts and addresses threats to Singapore’s internal security and stability. For over 75 years, ISD and its predecessor organisations have played a central role in countering threats such as those posed by foreign subversive elements, spies, racial and religious extremists, and terrorists. A fulfilling and rewarding career awaits those who want to join in ISD’s critical mission of keeping Singapore safe, secure and sovereign for all Singaporeans.

What You Will Be Working On

• For defensive purposes, perform red teaming assessments using proprietary and open-source tools to identify vulnerability of developed systems and endpoint devices and wireless communications (WIFI, Bluetooth and IoT)
• Develop, conduct research on, and maintain proficiency in tools, techniques and vulnerabilities trends for red teaming
• Understand and identify possible digital fingerprints, critical information, data and processes that must be protected in the context of system and network attack surface
• Provide written and verbal description of the identified security defects identified, articulate risks and propose mitigation measures

What We Are Looking For

• Applicants with no experience may apply
• Ability to work independently as well as in a team setting
• Relevant experience or knowledge in one or more of the following areas would be advantageous:
• Strong programming experience, and familiarity with scripting languages such as Python
• Knowledge of and familiarity with Linux-like operating systems
• Knowledge of processes, procedures and methods to research, analyse and disseminate threat intelligence information
• Knowledge of tools used for network security analysis
• Knowledge of network concepts
• Wide Knowledge of server technologies including commonly used web servers, database servers, cloud storage and server-to-server secured network communications
• Reverse engineering experience in mobile applications, micro-services and Docker
• Only Singaporeans need apply
  We wish to inform that only shortlisted candidates will be notified.