Senior Cyber Security Testing Specialist

Singtel Group; Singapore; On-site; SGD 120,000 - 180,000; Full time

Job summary

Singtel 在新加坡设有安全测试团队，现招聘有经验的 Senior Cyber Security Testing Specialist。你将协调渗透测试、安审与漏洞赏金计划，评估风險并提供修复建议，结合前沿AI能力提升检测与防护。你将与外部供应商、内部团队及域安全冠军紧密合作，推动安全测试过程的持续改进。

理想候选人具备6年以上相关经验，熟悉应用和API渗透测试，具备GenAI应用安全测试经验者优先，能够执行针对APT的攻击模拟以验证控制效果。

Qualifications

• Bachelor’s degree in computer science or related field required.
• 至少6年相关网络安全经验，优先具备安全测试与评估经验。
• 具备协调渗透测试与安全评估任务的能力及与外部供应商/内部相关方协作经验。
• 具备审查安全发现、评估可利用性与技术影响并提出修复建议的能力。
• 具备应用与API渗透测试实战经验，具备GenAI应用安全测试相关经验者优先。
• 具备针对APT 等对手的TTPs进行攻击模拟测试经验者优先。
• 具备管理或支持Bug Bounty计划及源码安全审查工作的经验者优先。

Responsibilities

• 计划、协调并监督外部测试商的渗透测试与安全评估，确保符合Singtel安全要求。
• 与领域安全冠军、应用团队及相关方定义测试范围、参与规则、方法论、时间表与交付物。
• 在评估生命周期中管理供应商工作，跟进测试进展、解决问题并审查交付物。
• 独立审查分析安全发现，评估可利用性、技术影响、严重性与风险。
• 在测试方法、风险等级与修复建议方面提供独立判断，确保评估质量。
• 与利害关系人协作澄清发现、评估补偿控制、提供修复指导并确定风险处理。
• 协调修复跟进、重新测试及关闭发现，追踪未解决风险并定期管理汇报。
• 管理Bug Bounty 活动及源码安全审查工作，协调相关方并跟进修复。
• 识别并推动安全测试流程、供应商绩效与测试效果的改进。

Skills

Security testing

Penetration testing

Vendor coordination

Threat modeling

APT simulations

Bug bounty

Source code review

Education

Bachelor’s degree in computer science, Information Technology, Engineering, or related

Job description

Select how often (in days) to receive an alert:

Senior Cyber Security Testing Specialist

Singtel is where Technology meets Purpose.

We're building an AI-first telco for the future—connecting people, businesses and communities through trusted networks, intelligent digital services and next-generation technology.

From transforming everyday experiences in mobile, broadband, entertainment and lifestyle services to enabling enterprises with AI, 5G+, cloud, cybersecurity, data centres and digital platforms, we create the technology that powers how millions live, work and connect.

At Singtel, your work creates real impact. You'll solve meaningful challenges, shape critical digital infrastructure and help build secure, resilient and AI-enabled solutions that serve businesses, digital ecosystems and communities across the globe.

This is where BIG Possibilities become reality. Whether you're engineering intelligent networks, advancing sovereign AI cloud platforms, strengthening cybersecurity, designing seamless customer experiences or driving sustainable innovation, you'll be part of teams shaping the future of technology.

Backed by decades of expertise and driven by a culture of continuous learning and innovation, Singtel offers the scale, opportunities and support to help you grow your career while making a difference where it matters most.

Be a Part of Something BIG!

We are seeking an experienced and motivated Senior Cyber Security Testing Specialist to coordinate and oversee penetration testing, security assessments, Bug Bounty, and source code security review activities across the organisation. The role will work closely with external testing vendors, domain security champions, and relevant stakeholders to manage testing engagements, independently review and challenge security findings, assess associated risks, and provide guidance on remediation and appropriate risk treatment. The specialist will leverage modern security testing tools and AI capabilities, including frontier AI technologies, to support findings analysis, technical validation, identification of potential attack paths, and continuous improvement of security testing practices.

In addition, the specialist will perform targeted security testing and controlled attack simulations, emulating Advanced Persistent Threat (APT) actors’ tactics, techniques, and procedures (TTPs), to validate the effectiveness of security controls and detection capabilities.

Make an Impact by:

1. Security Assessment Management, Findings Analysis & Stakeholder Engagement

• Plan, coordinate, and oversee penetration testing and security assessments conducted by external vendors, ensuring compliance with Singtel's security requirements.
• Work closely with Domain Security Champions, application teams, and relevant stakeholders to define testing scope, rules of engagement, methodologies, timelines, and deliverables.
• Manage vendor engagements throughout the assessment lifecycle, including testing coordination, progress monitoring, issue resolution, and review of deliverables.
• Independently review and analyse security findings to assess exploitability, technical impact, severity, business context, and associated risks.
• Exercise independent judgement in challenging testing methodologies, findings, risk ratings, and remediation recommendations to ensure assessment quality and accuracy.
• Collaborate with stakeholders to clarify findings, assess compensating controls, provide remediation guidance, and determine appropriate risk treatment.
• Coordinate remediation follow-up, retesting, and closure of findings, including tracking outstanding risks and providing regular management reporting.
• Manage Bug Bounty activities and coordinate source code security reviews, including findings validation, stakeholder engagement, and remediation follow-up.
• Identify and contribute to improvements in security testing processes, vendor performance, assessment quality, and overall testing effectiveness

2. Technical Security Testing & Control Validation

• Perform targeted penetration testing, technical validation, and vulnerability retesting to assess security weaknesses and verify the effectiveness of remediation measures.
• Perform targeted security testing and controlled attack simulations using Advanced Persistent Threat (APT) actors’ Tactics, Techniques, and Procedures (TTPs), aligned with frameworks such as MITRE ATT&CK, to validate the effectiveness of security controls and detection capabilities.
• Work closely with security monitoring and relevant technical teams to analyse testing outcomes, identify detection gaps, and validate improvements through retesting.
• Keep abreast of emerging vulnerabilities, attack techniques, and security testing technologies to support continuous improvement of testing capabilities.

Skills for Success:

• Bachelor’s degree in computer science, Information Technology, Engineering, or a related discipline.
• At least 6 years of relevant cyber security experience, preferably in security testing and assessment, including penetration testing or security control validation.
• Experience coordinating penetration testing and security assessment engagements with external vendors and internal stakeholders.
• Experience reviewing and analysing security findings, assessing exploitability and technical impact, and recommending appropriate remediation.
• Hands-on experience in application and API penetration testing, with exposure to GenAI application security testing being advantageous.
• Experience or exposure to targeted attack simulation using Advanced Persistent Threat (APT) actors’ Tactics, Techniques, and Procedures (TTPs) to validate security controls and detection capabilities.
• Experience managing or supporting Bug Bounty programs and source code security review activities would be advantageous.

Are you ready to say hello to BIG Possibilities?

Join Singtel to shape what's next and accelerate your career through meaningful work, continuous learning, and real impact.

Take the leap with Singtel to shape what’s next and accelerate your growth.