Penetration Test and Vulnerability Assessment Expert

The Digital and Intelligence Service (DIS); Singapore; On-site; SGD 90,000 - 150,000; Full time

Job summary

The Digital and Intelligence Service (DIS) seeks a Penetration Test and Vulnerability Assessment Expert within the Cyber Protection Group. You will perform PT, VA, and code reviews on IT assets, including infrastructure and military applications, and develop targeted tools to strengthen testing capabilities.

You will document findings, produce detailed technical reports and executive summaries, and collaborate with engineers and stakeholders to remediate risks.

Qualifications

• Education in Information Security, Computer Science, IT, or related field.
• Industry-recognized certifications such as CREST CRT, GPEN, or OSCP
• Strong understanding of web application, infrastructure, and network security architecture.
• Excellent communication and presentation skills to convey complex findings to stakeholders.
• Demonstrated ability to work independently and in cross-functional teams.
• Highly analytical, self-driven, and committed to continuous learning.

Responsibilities

• Conduct Penetration Testing (PT), Vulnerability Assessments (VA) and Source Code Security Reviews on IT assets.
• Develop tailored security assessment tools and scripts to enhance testing capabilities.
• Document findings and prepare detailed technical reports including executive summaries.

Skills

Penetration testing

Vulnerability assessment

Security reporting

Communication skills

Education

Bachelor's in Information Security/CS

Tools

BurpSuite

Metasploit

Nessus

Nexpose

Job description

Penetration Test and Vulnerability Assessment Expert - Cyber Protection Group

What You Will Do

• Conduct comprehensive Penetration Testing (PT), Vulnerability Assessments (VA), and Source Code Security Reviews on IT assets, including infrastructure, web applications, and military applications.
• Develop tailored security assessment tools and scripts to enhance testing capabilities and address evolving threat vectors.
• Document findings, conduct analysis, and prepare detailed technical reports, including executive summaries for various stakeholders.
• Collaborate with security engineers, developers, and other stakeholders to provide actionable guidance on remediating identified security risks and vulnerabilities.
• Provide expertise in the design and implementation of security controls across applications, infrastructure, and network systems.
• Develop and deliver specialized training and awareness programs to elevate the cybersecurity capabilities of the SAF personnel, with opportunities for growth in leadership and knowledge-sharing in the military cybersecurity context.
• Maintain up-to-date knowledge of emerging threats, security best practices, and industry-standard frameworks.

What You Will Bring

• Education in Information Security, Computer Science, IT, or a related field.
• Industry-recognized certifications such as CREST CRT, GPEN, or OSCP
• Strong understanding of web application, infrastructure, and network security architecture.
• Excellent communication and presentation skills, with a focus on conveying complex security findings to both technical and non-technical stakeholders.
• Demonstrated ability to work independently and collaboratively within cross-functional teams.
• Highly analytical, self-driven, and committed to continuous learning and skill enhancement.

Good to Have

• Track record of identifying and disclosing vulnerabilities or recognition in Capture-The-Flag (CTF) competitions.
• Proficiency with tools such as BurpSuite, Metasploit, Nexpose, Nessus, and other industry-standard penetration testing and vulnerability assessment tools.
• Experience conducting security assessments on application infrastructure, networks, and cloud-based systems.