Penetration Tester, Advanced Cybersecurity Division

Public Service Division; Singapore; On-site; SGD 90,000 - 180,000; Full time

Job summary

Public Service Division is seeking a seasoned Penetration Testing professional to strengthen security across IMDA's digital infrastructure. The role involves designing end-to-end testing programmes, researching attacker TTPs, and coordinating simulated cyber exercises with asset owners and stakeholders.

The successful candidate will have at least 5 years in information security, OSCP or equivalent certification, and strong communication skills to convey complex findings to technical and

Qualifications

• Minimum 5 years of hands-on information security experience with penetration testing background.
• OSCP or equivalent offensive security certification is required.
• Experience with networks and cloud technologies, preferably including emerging technologies such as 5G.
• Strong communication and ability to present technical findings to both technical and non-technical audiences.

Responsibilities

• Conceptualise, design and deliver end-to-end Penetration Testing programmes across the digital infrastructure.
• Research attacker TTPs to keep testing techniques and tools current with evolving threats.
• Plan and participate in cyber security exercises simulating adversarial scenarios to test readiness.
• Perform Penetration Testing in coordination with asset owners ensuring controlled, minimal disruption to operations.
• Draft reports and present findings, recommendations and remediation strategies to technical teams and senior stakeholders.

Skills

Analytical thinking

Communication skills

Interpersonal skills

Penetration testing

Education

Information Security/Engineering/Computer Science degree

Tools

OSCP certification

Job description

[What the role is]

This role sits within the Connectivity, Cybersecurity & Resilience Group
(C2R) Group. C2R strengthens the cybersecurity and resilience posture of
the telecommunication and media sectors in Singapore.
The Group keeps Singapore’s digital connectivity secure,
trusted, and robust against an evolving and increasingly
complex threat landscape.

[What you will be working on]

• Conceptualise, design and deliver end-to-end Penetration Testing programmes to proactively identify and address security vulnerabilities across IMDA’s digital infrastructure.
• Research attacker Tactics, Techniques and Procedures (TTPs) to continuously enhance existing penetration testing techniques, procedures and tools, ensuring assessments remain relevant against the latest threat landscape.
• Participate in and plan attack scenarios for cyber security exercises, simulating real-world adversarial conditions to test and improve organisational readiness and incident response capabilities.
• Perform Penetration Testing in close coordination with asset owners, ensuring assessments are conducted in a controlled and responsible manner with minimal disruption to operations.
• Draft comprehensive reports and present findings, recommendations and remediation strategies clearly to both technical teams and senior stakeholders.

[What we are looking for]

• Background in Information Security, Engineering, Computer Science or an equivalent discipline.
• Minimum 5 years of hands-on work experience in information security, with demonstrated experience in penetration testing or offensive security roles.
• Possession of OSCP certification or equivalent industry-recognised offensive security certification.
• Experience in networks and cloud technologies would be a distinct advantage, particularly in the context of emerging technologies such as 5G.
• Strong analytical mindset with a passion for tackling complex cybersecurity challenges and staying ahead of the evolving threat landscape.
• Good communication and interpersonal skills, with the ability to articulate technical findings clearly to both technical and non-technical audiences.