Penetration Tester, Advanced Cybersecurity Division

sggovterp; Singapore; On-site; SGD 120,000 - 180,000; Full time

Job summary

IMDA in Singapore seeks an experienced security professional to lead end-to-end Penetration Testing programmes across the agency’s digital infrastructure.

You will research attacker TTPs, plan attack scenarios for cyber exercises, and coordinate tests with asset owners to minimize disruption while delivering actionable findings to technical teams and senior stakeholders.

Qualifications

• Background in Information Security, Engineering or Computer Science or equivalent discipline.
• Minimum 5 years hands-on information security experience with penetration testing or offensive security.
• Possession of OSCP or equivalent offensive security certification.
• Experience in networks and cloud technologies is advantageous, especially in 5G context.
• Strong analytical mindset with ability to tackle complex cybersecurity challenges and stay ahead of threats.
• Good communication and interpersonal skills to articulate findings to technical and non-technical audiences.

Responsibilities

• Conceptualise, design and deliver end-to-end Penetration Testing programmes for IMDA's digital infrastructure.
• Research attacker TTPs to enhance penetration testing techniques, procedures and tools.
• Plan and participate in cyber security exercises simulating adversarial conditions.
• Perform Penetration Testing in coordination with asset owners with minimal disruption to operations.
• Draft comprehensive reports and present findings, recommendations and remediation strategies to technical teams and senior stakeholders.

Skills

Information Security

Penetration Testing

Offensive Security

Cloud Technologies

Communication

Education

Bachelors in Information Security / CS / Engineering

OSCP Certification

Job description

What the role is

This role sits within the Connectivity, Cybersecurity & Resilience Group (C2R) Group. C2R strengthens the cybersecurity and resilience posture of the telecommunication and media sectors in Singapore. The Group keeps Singapore's digital connectivity secure, trusted, and robust against an evolving and increasingly complex threat landscape.

What you will be working on

Conceptualise, design and deliver end-to-end Penetration Testing programmes to proactively identify and address security vulnerabilities across IMDA's digital infrastructure.

Research attacker Tactics, Techniques and Procedures (TTPs) to continuously enhance existing penetration testing techniques, procedures and tools, ensuring assessments remain relevant against the latest threat landscape.

Participate in and plan attack scenarios for cyber security exercises, simulating real-world adversarial conditions to test and improve organisational readiness and incident response capabilities.

Perform Penetration Testing in close coordination with asset owners, ensuring assessments are conducted in a controlled and responsible manner with minimal disruption to operations.

Draft comprehensive reports and present findings, recommendations and remediation strategies clearly to both technical teams and senior stakeholders.

What we are looking for

• Background in Information Security, Engineering, Computer Science or an equivalent discipline.
• Minimum 5 years of hands‑on work experience in information security, with demonstrated experience in penetration testing or offensive security roles.
• Possession of OSCP certification or equivalent industry‑recognised offensive security certification.
• Experience in networks and cloud technologies would be a distinct advantage, particularly in the context of emerging technologies such as 5G.
• Strong analytical mindset with a passion for tackling complex cybersecurity challenges and staying ahead of the evolving threat landscape.
• Good communication and interpersonal skills, with the ability to articulate technical findings clearly to both technical and non-technical audiences.