Penetration Tester, Advanced Cybersecurity Division

This role sits within the Connectivity, Cybersecurity & Resilience Group (C2R) Group. C2R strengthens the cybersecurity and resilience posture of the telecommunication and media sectors in Singapore. The Group keeps Singapore’s digital connectivity secure, trusted, and robust against an evolving and increasingly complex threat landscape. Responsibilities • Conceptualise, design and deliver end-to-end Penetration Testing programmes to proactively identify and address security vulnerabilities across IMDA's digital infrastructure. • Research attacker Tactics, Techniques and Procedures (TTPs) to continuously enhance existing penetration testing techniques, procedures and tools, ensuring assessments remain relevant against the latest threat landscape. • Participate in and plan attack scenarios for cyber security exercises, simulating real-world adversarial conditions to test and improve organisational readiness and incident response capabilities. • Perform Penetration Testing in close coordination with asset owners, ensuring assessments are conducted in a controlled and responsible manner with minimal disruption to operations. • Draft comprehensive reports and present findings, recommendations and remediation strategies clearly to both technical teams and senior stakeholders. Requirements • Background in Information Security, Engineering, Computer Science or an equivalent discipline. • Minimum 5 years of hands-on work experience in information security, with demonstrated experience in penetration testing or offensive security roles. • Possession of OSCP certification or equivalent industry-recognised offensive security certification. • Experience in networks and cloud technologies would be a distinct advantage, particularly in the context of emerging technologies such as 5G. • Strong analytical mindset with a passion for tackling complex cybersecurity challenges and staying ahead of the evolving threat landscape. • Good communication and interpersonal skills, with the ability to articulate technical findings clearly to both technical and non-technical audiences.