[LTA-ITCD] SNR/EXEC CYBERSECURITY ENGINEER, CYBER ARCHITECTURE & DEVT

Land Transport Authority; Singapore; On-site; SGD 120,000 - 180,000; Full time

Job summary

The Land Transport Authority in Singapore invites applications for a Senior/Executive Cybersecurity Engineer specializing in cyber architecture and development. You will conduct end-to-end VAPT, advise on secure-by-design architectures, and help shape AI-assisted testing strategies across critical digital systems.

The role blends hands-on security testing, capability development, and stakeholder engagement to strengthen security across applications, infrastructure, and cloud environments.

Qualifications

• Minimum 2 years of VAPT/offensive security experience.
• Hands-on capability with VAPT methodologies and tools.
• Certifications OSCP or CREST or equivalent preferred.
• Familiarity with MITRE ATT&CK and red/purple teaming.
• Knowledge of AI-enabled security testing approaches is advantageous.
• Strong cloud and network security knowledge.

Responsibilities

• Lead end-to-end VAPT across applications, infrastructure, networks, and cloud environments; identify exploitable weaknesses and remediate.
• Design and execute adversarial attack simulations to reveal blind spots in controls.
• Explore and evaluate AI-enabled approaches for planning, analysis, and remediation with governance.
• Advise on risk assessments, review security architecture, and recommend practical security solutions.
• Partner with architects, developers, and operations to embed secure-by-design practices.
• Track emerging vulnerabilities and translate findings into dashboards and prioritized remediation.
• Analyse trends across VAPT, AAS, and assurance activities to inform security standards and playbooks.
• Communicate complex findings clearly to technical and non-technical stakeholders.

Skills

Cybersecurity

Cloud security

Network security

Encryption

Authentication protocols

VAPT

Adversary emulation

MITRE ATT&CK

Security automation

Scripting

Red teaming

Purple teaming

AI concepts

Education

OSCP

CREST certification

CISSP

CISM

CRISC

CISA

Tools

Security testing tools

Adversary emulation tools

MITRE ATT&CK framework

Job description

What the role is:

SENIOR / EXECUTIVE CYBERSECURITY ENGINEER, CYBER ARCHITECTURE & DEVELOPMENT

What you will be working on:

Join a forward-looking cybersecurity team where your technical expertise will directly strengthen the resilience of critical digital systems. You will work on high-impact Vulnerability Assessment and Penetration Testing (VAPT), build our in-house Adversarial Attack Simulation (AAS) capability, and advise project teams on secure architecture and implementation. You will also have the opportunity to explore and shape the responsible use of Artificial Intelligence (AI) in VAPT, helping us improve testing depth, speed, consistency, and insight. This role offers a distinctive blend of hands-on offensive security, capability development, innovation, and stakeholder engagement, with opportunities to influence how cybersecurity assurance evolves across the organisation.

• Lead and deliver end-to-end VAPT across applications, infrastructure, networks, and cloud environments by identifying exploitable weaknesses, validating business impact, and helping system owners remediate effectively.
• Design and execute safe, controlled Adversarial Attack Simulation exercises that emulate realistic threat actors and attack paths, revealing blind spots across preventive, detective, response, and recovery controls.
• Explore, prototype, and evaluate AI-enabled approaches for VAPT, including test planning, attack-path analysis, vulnerability triage, evidence correlation, report generation, and remediation guidance, with appropriate governance and human oversight.
• Serve as a trusted cybersecurity advisor to digital projects by conducting risk assessments, reviewing security architecture, and recommending practical, risk-informed security solutions.
• Partner with architects, developers, project teams, system owners, vendors, and security operations teams to embed secure-by-design practices throughout the system lifecycle.
• Track emerging vulnerabilities, attacker techniques, AI-enabled threats, and security technologies, translating developments into stronger testing methods, playbooks, and defensive improvements.
• Analyse and trend cybersecurity findings across VAPT, AAS, and other assurance activities to identify recurring weaknesses, systemic root causes, risk concentrations, and emerging patterns, translating these insights into dashboards, targeted remediation priorities, and improvements to security standards, testing playbooks, and preventive controls.
• Communicate complex technical findings clearly to both technical and non-technical stakeholders, turning assessment results into prioritised and actionable recommendations.

What you can look forward to: meaningful work that protects critical services; exposure to diverse technology environments; opportunities to build new VAPT, AAS, and AI-assisted testing capabilities; and a collaborative setting that supports experimentation, professional development, and knowledge sharing.

What we are looking for:

We are looking for a driven, hands-on cybersecurity professional who combines strong technical foundations with sound judgement, collaboration, and a drive to keep learning.

• Knowledge in Cybersecurity, Computer Science, Information Technology, or a related discipline, or equivalent relevant experience.
• OSCP, a relevant CREST certification, or an equivalent hands-on offensive security credential is preferred.
• CISSP (Certified Information Systems Security Professional), CISM (Certified Information Security Manager), CRISC (Certified in Risk and Information Systems Control), and CISA (Certified Information Systems Auditor) certifications are advantageous.
• At least 2 years of relevant experience in VAPT, offensive security, cybersecurity engineering, or security consultancy; candidates with strong practical capability gained through labs, competitions, research, or substantial independent projects may also be considered.
• Demonstrated hands-on capability with VAPT methodologies, manual testing techniques, and commonly used security assessment tools.
• Experience with adversary emulation, red teaming, purple teaming, attack frameworks such as MITRE ATT&CK, or the validation of security monitoring and incident response capabilities is advantageous.
• Familiarity with AI and machine learning concepts, large language models, AI-assisted security testing tools, scripting, or security automation, together with an understanding of responsible AI use and associated risks, is advantageous.
• Strong understanding of cloud configuration, network security, encryption, and authentication protocols.
• Strong analytical and problem-solving skills, with the ability to work independently, collaborate across teams, manage priorities, and explain technical risks clearly in writing and conversation.

About Land Transport Authority

The Land Transport Authority (LTA) is a statutory board under Ministry of Transport that spearheads land transport developments in Singapore. We are seeking dynamic, energetic, highly motivated, passionate and qualified professionals to join us.Many opportunities & challenges await those who are keen on an exciting career to realise our commitment to envision & implement an integrated transport system.