Senior Penetration Tester – Advanced Cybersecurity

Public Service Division; Singapore; On-site; SGD 90,000 - 180,000; Full time

Job summary

Public Service Division is seeking a seasoned Penetration Testing professional to strengthen security across IMDA's digital infrastructure. The role involves designing end-to-end testing programmes, researching attacker TTPs, and coordinating simulated cyber exercises with asset owners and stakeholders.

The successful candidate will have at least 5 years in information security, OSCP or equivalent certification, and strong communication skills to convey complex findings to technical and

Qualifications

• Minimum 5 years of hands-on information security experience with penetration testing background.
• OSCP or equivalent offensive security certification is required.
• Experience with networks and cloud technologies, preferably including emerging technologies such as 5G.
• Strong communication and ability to present technical findings to both technical and non-technical audiences.

Responsibilities

• Conceptualise, design and deliver end-to-end Penetration Testing programmes across the digital infrastructure.
• Research attacker TTPs to keep testing techniques and tools current with evolving threats.
• Plan and participate in cyber security exercises simulating adversarial scenarios to test readiness.
• Perform Penetration Testing in coordination with asset owners ensuring controlled, minimal disruption to operations.
• Draft reports and present findings, recommendations and remediation strategies to technical teams and senior stakeholders.

Skills

Analytical thinking

Communication skills

Interpersonal skills

Penetration testing

Education

Information Security/Engineering/Computer Science degree

Tools

OSCP certification

Job description

Public Service Division is seeking a seasoned Penetration Testing professional to strengthen security across IMDA's digital infrastructure. The role involves designing end-to-end testing programmes, researching attacker TTPs, and coordinating simulated cyber exercises with asset owners and stakeholders.

The successful candidate will have at least 5 years in information security, OSCP or equivalent certification, and strong communication skills to convey complex findings to technical and