Penetration Tester, Advanced Cybersecurity Division

IMDA; Singapore; On-site; SGD 110,000 - 170,000; Full time

Job summary

IMDA, within the Connectivity, Cybersecurity & Resilience Group (C2R), seeks an experienced Penetration Tester to lead end-to-end testing programs across its digital infrastructure. You will research attacker TTPs, plan cyber exercises, and coordinate testing with asset owners to minimize operational impact.

The role requires 5+ years in information security, hands-on testing or offensive security, and OSCP certification, with preferable cloud and 5G-related experience.

Qualifications

• 5+ years of hands-on work in information security
• Experience in penetration testing or offensive security roles
• Strong communication and interpersonal skills
• Knowledge of networks and cloud technologies a plus
• Ability to articulate findings to technical and non-technical audiences

Responsibilities

• Conceptualise, design and deliver end-to-end Penetration Testing programmes across IMDA's digital infrastructure
• Research attacker TTPs to enhance penetration testing techniques, procedures and tools
• Plan attack scenarios for cyber security exercises to test readiness
• Perform Penetration Testing in coordination with asset owners with minimal disruption
• Draft comprehensive reports and present findings and remediation strategies to stakeholders

Skills

Penetration testing

Information security

Offensive security

Education

OSCP certification

Job description

What the role is

This role sits within the Connectivity, Cybersecurity & Resilience Group (C2R) Group. C2R strengthens the cybersecurity and resilience posture of the telecommunication and media sectors in Singapore. The Group keeps Singapore's digital connectivity secure, trusted, and robust against an evolving and increasingly complex threat landscape.

What you will be working on

• Conceptualise, design and deliver end-to-end Penetration Testing programmes to proactively identify and address security vulnerabilities across IMDA's digital infrastructure.
• Research attacker Tactics, Techniques and Procedures (TTPs) to continuously enhance existing penetration testing techniques, procedures and tools, ensuring assessments remain relevant against the latest threat landscape.
• Participate in and plan attack scenarios for cyber security exercises, simulating real-world adversarial conditions to test and improve organisational readiness and incident response capabilities.
• Perform Penetration Testing in close coordination with asset owners, ensuring assessments are conducted in a controlled and responsible manner with minimal disruption to operations.
• Draft comprehensive reports and present findings, recommendations and remediation strategies clearly to both technical teams and senior stakeholders.

What we are looking for

• Background in Information Security, Engineering, Computer Science or an equivalent discipline.
• Minimum 5 years of hands‑on work experience in information security, with demonstrated experience in penetration testing or offensive security roles.
• Possession of OSCP certification or equivalent industry-recognised offensive security certification.
• Experience in networks and cloud technologies would be a distinct advantage, particularly in the context of emerging technologies such as 5G.
• Strong analytical mindset with a passion for tackling complex cybersecurity challenges and staying ahead of the evolving threat landscape.
• Good communication and interpersonal skills, with the ability to articulate technical findings clearly to both technical and non-technical audiences.