Penetration Tester, Advanced Cybersecurity Division

About the role

This Penetration Tester position sits within the Connectivity, Cybersecurity & Resilience Group (C2R) of IMDA, which strengthens the cybersecurity and resilience posture of Singapore's telecommunications and media sectors. You will design and deliver end-to-end penetration testing programmes to find and fix security weaknesses in IMDA's digital infrastructure.

Key responsibilities

• Design and deliver full penetration testing programmes to identify and address vulnerabilities across IMDA's digital infrastructure.
• Research attacker tactics, techniques and procedures (TTPs) to keep testing methods, procedures and tools up to date.
• Take part in planning attack scenarios for cyber security exercises, simulating real-world adversarial conditions to test readiness and incident response.
• Run penetration tests in close coordination with asset owners, keeping assessments controlled and minimally disruptive to operations.
• Draft detailed reports and present findings, recommendations and remediation strategies to technical teams and senior stakeholders.

Required profile

• Background in Information Security, Engineering, Computer Science or an equivalent discipline.
• At least 5 years of hands-on information security experience, including penetration testing or offensive security roles.
• OSCP certification or an equivalent industry-recognised offensive security certification.
• Strong analytical mindset and good communication skills, able to explain technical findings to technical and non-technical audiences.

Required skills

• Penetration testing and offensive security.
• Experience with networks and cloud technologies is a distinct advantage, especially for emerging technologies such as 5G.