Senior Offensive Security Consultant — Attack Simulation

Cyber Security Agency of Singapore (CSA); Singapore; On-site; SGD 120,000 - 180,000; Full time

Job summary

Cyber Security Agency of Singapore (CSA) is seeking a senior offensive security practitioner to join the Attack Simulation Group (ASG). This hands-on role focuses on applying real-world attack techniques to test critical infrastructure in support of Singapore’s national cyber security mission.

You will lead end-to-end engagements, mentor junior consultants, and drive the evolution of ASG’s testing methodologies across web, mobile, cloud, OT, and telecom environments, while contributing to

Qualifications

• Typically 5–8 years of relevant experience in penetration testing, red team operations, or related offensive security roles.
• Industry certifications such as OSCP, CREST CRT, CCT, CRTO, or equivalent are desirable.

Responsibilities

• Lead and conduct penetration testing, red teaming, and adversary simulation across web, mobile, infrastructure, cloud, OT, and telecommunications environments.
• Execute realistic attack scenarios to assess the resilience of Critical Information Infrastructure (CII), including systems supporting essential services.
• Support purple-teaming activities by translating offensive techniques into actionable detection and response improvements.
• Lead engagements end-to-end, including planning, execution, reporting, and technical debriefs with stakeholders.
• Mentor junior consultants and contribute to raising the team’s overall technical standard.
• Drive continuous improvement of ASG’s testing methodologies, tooling, and research, including taking on problem spaces outside your primary domain when required.
• Be prepared to contribute to strategic initiatives, supporting procurement activities, industry outreach, or coordination work to strengthen security outcomes.

Job description

Cyber Security Agency of Singapore (CSA) is seeking a senior offensive security practitioner to join the Attack Simulation Group (ASG). This hands-on role focuses on applying real-world attack techniques to test critical infrastructure in support of Singapore’s national cyber security mission.

You will lead end-to-end engagements, mentor junior consultants, and drive the evolution of ASG’s testing methodologies across web, mobile, cloud, OT, and telecom environments, while contributing to