Lead Penetration Tester, Cybersecurity & Resilience

Government Technology Agency (GovTech); Singapore; On-site; SGD 120,000 - 180,000; Full time

Job summary

Government Technology Agency (GovTech) is seeking an experienced cybersecurity professional to lead end-to-end Penetration Testing programmes across Singapore's digital infrastructure. You will research attacker TTPs and enhance testing techniques, plan and run security exercises, and deliver actionable remediation plans to stakeholders.

The role requires at least 5 years of hands-on information security experience and an OSCP or equivalent certification, with familiarity in networks and cloud

Qualifications

• Background in Information Security, Engineering, Computer Science or an equivalent discipline.
• Minimum 5 years hands-on work experience in information security with penetration testing experience.
• Possession of OSCP or equivalent offensive security certification.
• Experience in networks and cloud technologies; 5G exposure is a plus.
• Strong analytical mindset and ability to communicate findings clearly.

Responsibilities

• Conceptualise, design and deliver end-to-end Penetration Testing programmes for IMDA's digital infrastructure.
• Research attacker TTPs to enhance testing techniques, procedures and tools.
• Plan cyber security exercises and simulate adversarial conditions to test readiness.
• Perform penetration testing in coordination with asset owners with minimal disruption.
• Draft comprehensive reports and present findings and remediation strategies to technical teams and senior stakeholders.

Skills

Penetration testing

OSCP

Education

Information Security

Job description

Government Technology Agency (GovTech) is seeking an experienced cybersecurity professional to lead end-to-end Penetration Testing programmes across Singapore's digital infrastructure. You will research attacker TTPs and enhance testing techniques, plan and run security exercises, and deliver actionable remediation plans to stakeholders.

The role requires at least 5 years of hands-on information security experience and an OSCP or equivalent certification, with familiarity in networks and cloud