Penetration Tester-Govt Clerance

AKERA TECHNOLOGIES PTE. LTD.; Singapore; On-site; SGD 120,000 - 180,000; Full time

Job summary

AKERA TECHNOLOGIES PTE. LTD. seeks a CAT1-cleared penetration tester to lead VAPT for Singapore government and critical infrastructure. You will execute full-scope attacks on networks, apps, cloud, and OT, bypass advanced defenses, and deliver remediation strategies.

The role requires CREST/OSCP certification, exploit development skills in C++ and Python, and experience with GovTech cybersecurity frameworks.

Qualifications

• CAT1Security Clearance as non-negotiable requirement.
• Active OSCP or CREST CRT/CCT (Inf/App) certifications.
• 2+ years in pentesting.

Responsibilities

• Lead Advanced Threat Emulation engagements across networks, apps, cloud and OT.
• Coordinate govt ICT campaigns and deliver remediation playbooks.
• Prepare executive briefings with exploit demos for CISOs.

Skills

Penetration testing

Exploit development

Threat emulation

Phishing campaigns

Tools

Metasploit Pro

Cobalt Strike

Burp Suite Pro

PowerSploit

Bloodhound

Mimikatz

Impacket

Covenant C2

Volatility

Wireshark

CHIRP(ICS)

HackRF One

Proxmark3

Wi-FiPineapple

Pacu (AWS)

MicroBurst (Azure)

GCP IAM Exploit Toolkit

Job description

Job Overview

We seek a Penetration Testing with CAT1 clearance to leadVAPT for Singapore government and critical infrastructure sectors. You willexecute full-scope attacks (networks, apps, cloud, OT), bypass advanceddefenses, and deliver actionable remediation strategies. This role requiresCREST/OSCP certification, deep exploit development skills, and experience withGovTech cybersecurity frameworks.

Core-Responsibilities

Advanced Threat Emulation:

• 1.CAT1-clearedengagements:
• 2.Network: Breach segmented govt networks(e.g., air-gapped systems)
• 3.Applications: Exploit web/mobile apps(SCADA interfaces, GovTech portals)
• 4.Cloud: Attack AWS GovCloud/AzureGovernment environments
• 5.OT:ICS/SCADA system penetration(Siemens, Rockwell)
• 6.Develop custom malware/exploits (C++,Python) to evade EDR/XDR.

Reteam Operations:

• 1.Lead multi-vector campaigns:
• 2.Phishing (Evade Proofpoint/MS ATP)
• 3.Physical security bypass (RFID cloning,access control spoofing)
• 4.Wireless attacks (802.1X,WPA3-Enterprise)
• 5.Document TTPs aligned with MITREATT&CK for ICs Enterprise.

Govt Compliance & Reporting:

• 1.Align tests with IM8, CSA Red TeamingGuidelines, and NIST SP 800-115.
• 2.Deliver executive briefings to CISOswith exploit demos.
• 3.Create remediation playbooks

Research & Development:

• 1.Reverse engineer firmware (Binwalk,Ghidra) for 0-day discovery.
• 2.Contribute to ASEAN CERT advisories(e.g., Sing CERT).

Technical Requirements

Non-Negotiable Credentials

• 1.CAT1Security Clearance
• 2.Active Certifications: OSCP or CRESTCRT/CCT (Inf/App)
• 3.2+years in pentesting

Tool Proficiency

• 1.Exploitation- Metasploit Pro, CobaltStrike, Burp Suite Pro, Powersport
• 2.Post-Exploit- Bloodhound, Mimi Katz,Impacket, Covenant C2
• 3.Forensics- Volatility, Wireshark, CHIRP(ICS)
• 4.Wireless- HackRF One, Proxmark3, Wi-FiPineapple
• 5.Cloud- Pacu (AWS), MicroBurst (Azure),GCP IAM Exploit Toolkit

Preferred Qualifications

• 1.Certifications:OSCE³, CREST CCT Gold,OSCP
• 2.Govt Framework Experience: IM8Penetration Test Guidelines, CSA Cyber Essentials
• 3.Public Contributions: CVEs, exploit-dbsubmissions, conference talks (Black Hat Asia, DEFCON)