Manager (Penetration Test & Vulnerability Assessment) - DIS

MINDEF; Singapore; On-site; SGD 70,000 - 110,000; Full time

Job summary

MINDEF is seeking a Security Testing Specialist to conduct penetration testing, vulnerability assessments, and source code reviews across IT assets, including military applications.

The role requires 1+ year hands-on PT/VA experience, with preference for military/government testing. You will develop tools, document findings, and collaborate with cross-functional teams to remediate risks and strengthen security controls within Singapore’s defence ecosystem.

Qualifications

• Education in Information Security, Computer Science, IT or related field.
• Industry-recognised certifications such as CREST CRT, GPEN, or OSCP.
• At least 1 year hands-on PT/VA experience; preference for military/government testing.
• Experience evaluating security in application infrastructure, networks and cloud systems.
• Strong understanding of web, infrastructure and network security architecture.
• Excellent communication for stakeholders; able to work independently and in teams.
• Proficiency in scripting languages: Python, PowerShell, JavaScript, VBScript, Ruby, or Perl.
• Track record of vulnerability disclosure or CTF recognition.

Responsibilities

• Conduct PT, VA, and Source Code Security Reviews on IT assets including infrastructure and military apps.
• Develop security assessment tools/scripts to enhance testing capabilities.
• Document findings and prepare detailed reports with executive summaries for stakeholders.
• Collaborate with security engineers, developers and others to remediate risks.
• Provide expertise in security controls design across applications, infrastructure and networks.
• Develop and deliver security training for SAF personnel and leaders.

Skills

Penetration Testing

Vulnerability Assessment

Threat Analysis

Security Reporting

Education

Information Security Degree

Computer Science Degree

Tools

BurpSuite

Metasploit

Nessus

Nexpose

Job description

What the role is:

You play a pivotal role in safeguarding Singapore’s defence and security interests by conducting comprehensive Penetration Testing (PT), Vulnerability Assessments (VA), and Source Code Security Reviews on IT assets, including infrastructure, web applications, and military applications.

What you will be working on:

• Conduct comprehensive Penetration Testing (PT), Vulnerability Assessments (VA), and Source Code Security Reviews on IT assets, including infrastructure, web applications, and military applications
• Develop tailored security assessment tools and scripts to enhance testing capabilities and address evolving threat vectors
• Document findings, conduct analysis, and prepare detailed technical reports, including executive summaries for various stakeholders
• Collaborate with security engineers, developers, and other stakeholders to provide actionable guidance on remediating identified security risks and vulnerabilities
• Provide expertise in the design and implementation of security controls across applications, infrastructure, and network systems
• Develop and deliver specialised training and awareness programs to elevate the cybersecurity capabilities of the SAF personnel, with opportunities for growth in leadership and knowledge-sharing in the military cybersecurity context
• Maintain up-to-date knowledge of emerging threats, security best practices, and industry-standard frameworks

Challenge(s)

• Maintaining consistent quality under time pressure
• Quickly learning and troubleshooting various tools and platforms

What we are looking for:

• Education in Information Security, Computer Science, IT or a related field
• Industry-recognised certifications such as CREST CRT, GPEN, or OSCP
• At least 1 year of hands-on experience in conducting PT and VA, with a strong preference for experience in military or government-focused penetration testing
• Experience conducting security assessments on application infrastructure, networks, and cloud-based systems
• Strong understanding of web application, infrastructure, and network security architecture
• Excellent communication and presentation skills, with a focus on conveying complex security findings to both technical and non-technical stakeholders
• Ability to work independently and collaboratively within cross-functional teams
• Highly analytical, self-driven, and committed to continuous learning and skill enhancement
• Proficiency in scripting languages, such as Python, PowerShell, JavaScript, VBScript, Ruby, or Perl
• Track record of identifying and disclosing vulnerabilities or recognition in Capture-The-Flag (CTF) competitions
• Proficiency with tools such as BurpSuite, Metasploit, Nexpose, Nessus, and other industry-standard penetration testing and vulnerability assessment tools

Appointment will be commensurate with your experience.

Only shortlisted candidates will be notified.

About MINDEF

The mission of MINDEF and the Singapore Armed Forces is to enhance Singapore's peace and security through deterrence and diplomacy, and should these fail, to secure a swift and decisive victory over the aggressor.The Defence Executive Officer (DXO) scheme is the non-uniformed career scheme of MINDEF that offers myriad opportunities in various job functions, such as corporate communications, cyber security, data analytics and visualisation, defence policy, finance, HR, psychology, and more. Embodying the same level of commitment towards defence, DXOs work together with their military counterparts to contribute to MINDEF/SAF’s mission and ensure Singapore's security and stability. United by this common cause, our lines of defence complement each other to secure the prosperity and progress of our nation.