Senior Offensive Engineering Analyst

INCOME INSURANCE LIMITED; Singapore; On-site; SGD 90,000 - 150,000; Full time

Job summary

PVH is seeking a Cyber Assurance Specialist in Singapore to drive continuous Breach and Attack Simulation (BAS) and adversary-informed testing aligned with MITRE ATT&CK. You will partner with Cyber Threat Intelligence to identify weaknesses across people, process, and technology, translating findings into actionable remediation for Security Operations and internal teams.

The role emphasizes hands-on BAS platforms, safe test design, and remediation actions to improve prevention, detection, and

Qualifications

• Bachelor's degree in technology, information security or enterprise architecture.
• 2+ years in cyber assurance, BAS, control validation or similar roles.
• Hands-on with BAS platforms, designing safe test scenarios, and remediation actions.
• Strong automation/coding skills: Python, PowerShell, APIs, workflow automation.
• Knowledge of secure configuration, vulnerability management and OWASP/MAS TRM.

Responsibilities

• Drive BAS and adversary-informed testing mapped to MITRE ATT&CK.
• Collaborate with Cyber Threat Intelligence to develop intelligence-led attack simulations.
• Translate BAS findings into remediation recommendations for Security Operations.
• Strengthen cyber resilience through continuous assurance and control assessments.
• Support additional cyber assurance tasks including security testing and hardening reviews.

Skills

BAS operation

Attack simulations

Automation scripting

MITRE ATT&CK mapping

Education

Bachelor's degree in technology/cyber security

Tools

Picus Security

Cymulate

Job description

Key Responsibilities

• Drive continuous Breach and Attack Simulation (BAS) and adversary-informed testing mapped to MITRE ATT&CK to validate preventive, detective, and response controls.
• Collaborate with Cyber Threat Intelligence to develop intelligence-led attack simulations that identify weaknesses across Income's people, process, and technology pillars.
• Translate BAS and adversary-based testing findings into actionable remediation recommendations for Security Operations and relevant internal teams, enabling improved prevention, detection, response, and overall control effectiveness.
• Strengthen Income's overall cyber resilience through continuous assurance and control effectiveness assessments.
• Support additional cyber assurance tasks as required, including security testing, hardening compliance reviews, technical risk assessments, process improvement initiatives, and other management-assigned activities.

Qualifications

• Bachelor's Degree in technology, information or cyber risk management, information security or enterprise architecture.
• Minimum of two years' direct information security experience in cyber assurance, BAS, control validation, technical risk assessment, or similar end-user security roles.
• Hands-on experience operating BAS platforms, designing safe test scenarios, analysing control effectiveness results, and driving remediation or improvement actions.
• Strong automation and coding skillsets, including scripting with Python, PowerShell, APIs, workflow automation, and MCP or AI-assisted automation to improve security assurance processes.
• Good understanding of secure configuration, hardening standards, vulnerability management, OWASP, MAS TRM, compliance review, and enterprise security operations.
• Relevant certifications in security assurance, cloud, automation, offensive security, or risk management such as CISSP, OSCP, GPEN, GWAPT, CREST, or equivalent certifications preferred.

Competencies

• Able to operate BAS end-to-end as a control assurance owner, from test planning and scenario configuration to results analysis, stakeholder follow-up, reporting, and closure tracking. BAS platforms may include Picus Security, Cymulate, or equivalent tools.
• Strong understanding of threat behaviours, TTPs, MITRE ATT&CK mapping, and how these translate into practical control validation, detection engineering, and remediation priorities.
• Able to translate BAS, vulnerability, hardening, and compliance findings into business impact, remediation priorities, measurable improvement actions, and management-ready reporting.
• Keeps abreast of the financial-sector threat landscape, APT groups, and relevant threat actors, and applies these insights to enhance BAS testing and control assurance activities.
• Strong hands-on automation capability, including scripting, API integration, data handling, workflow orchestration, MCP-enabled automation, and the ability to improve repeatability and efficiency of cyber assurance activities.
• Good written communication skills, with the ability to explain security risks and assurance outcomes to technical and non-technical stakeholders.
• Able to work independently as an outcome owner, engage vendors and internal teams effectively, and drive actions to completion across both BAU operations and project initiatives.