Penetration Test & Vulnerability Assessment Specialist

Government Technology Agency; Singapore; On-site; SGD 60,000 - 80,000; Full time

Job summary

Join a leading agency driving Singapore’s Smart Nation initiatives as a Cybersecurity Specialist. You will play a critical role in securing government assets through penetration testing and vulnerability assessments. This position offers opportunities for continuous learning and development in a dynamic environment focused on public good.

Benefits

Wellness programs

Flexible work arrangements

Qualifications

• Passion for cybersecurity and understanding of system architecture.
• At least 1 year of hands-on penetration testing experience.

Responsibilities

• Conduct penetration testing and vulnerability assessments on IT assets.
• Support documentation of findings and develop customized tools.

Skills

Cybersecurity

Communication

Teamwork

Education

Degree in Information Security

Degree in Computer Science

Tools

Nexpose/Nessus

BurpSuite

Metasploit

Job description

What the role is:

GovTech is the lead agency driving Singapore’s Smart Nation initiatives and public sector digital transformation. As the Centre of Excellence for Infocomm Technology and Smart Systems (ICT & SS), GovTech develops capabilities in Data Science & Artificial Intelligence, Application Development, Smart City Technology, Digital Infrastructure, and Cybersecurity.

At GovTech, we offer a purposeful career to make lives better, empowering our people with continuous learning and development opportunities.

Join us in Singapore’s Smart Nation vision and build tech for the public good. Shape your future with us today!

Learn more at tech.gov.sg.

What you will be working on:

Do you want to play a critical role in securing our smart nation initiatives by uncovering cybersecurity weaknesses before threats occur? Are you ready to race against threat actors to prevent organization compromises?

We seek a cybersecurity specialist in penetration testing & vulnerability assessment to join our Cyber Security Group’s Red Team. You will help protect government assets from cyber-attacks and assess cybersecurity in new smart nation projects, demonstrating quick adaptation to new technologies. Your tasks include performing penetration tests and vulnerability assessments across infrastructure, web and mobile applications, source code security reviews, and targeted adversary simulations.

What you will be working on

• Conduct Penetration Testing (PT), Vulnerability Assessment (VA), and source code security reviews on IT assets
• Support documentation of findings, analysis, and report preparation
• Develop customized tools for PT and VA
• Assist stakeholders such as security engineers and developers in remediating security risks
• Advise on design and security controls for applications, infrastructure, and networks
• Create application security awareness programs and training
• Stay familiar with security principles, policies, and industry best practices

What we are looking for:

• Degree in Information Security, Computer Science/Engineering, IT, or equivalent
• Passion for cybersecurity
• Understanding of web application, system, and infrastructure architecture
• Good communication and presentation skills
• Team-oriented, self-motivated, creative, and versatile

Added advantage if you possess:

• Certifications like GPEN, CREST, OSCP
• At least 1 year of hands-on PT/VA experience
• Familiarity with scripting languages such as Python, Perl, JavaScript, PowerShell, Ruby
• Participation in Capture-The-Flag (CTF) competitions or public vulnerability disclosures
• Experience with tools like Nexpose/Nessus, BurpSuite, Metasploit
• Experience in security risk assessments

GovTech values diversity and is an equal opportunity employer. Our benefits include leave, wellness programs, flexible work arrangements, and more. Learn about life at GovTech at go.gov.sg/GovTechCareers and stay connected via go.gov.sg/ConnectWithGovTech.