Senior Cyber Security Testing Specialist

About the role

Singtel is looking for an experienced Senior Cyber Security Testing Specialist to coordinate and oversee penetration testing, security assessments, Bug Bounty and source code security review activities across the organisation. The role works closely with external testing vendors, domain security champions and stakeholders to manage testing engagements, independently review and challenge security findings, assess risks and guide remediation. It also uses modern security testing tools and AI capabilities, including frontier AI technologies, to support findings analysis, technical validation and attack path identification.

Key responsibilities

• Plan, coordinate and oversee penetration testing and security assessments by external vendors, defining scope, rules of engagement, methodologies, timelines and deliverables
• Manage vendor engagements, monitor progress, resolve issues and review deliverables
• Review security findings independently, assess exploitability, technical impact, severity and business context, and recommend remediation and risk treatment
• Coordinate remediation follow-up, retesting and closure, track outstanding risks and report regularly to management
• Manage Bug Bounty activities and coordinate source code security reviews
• Conduct targeted penetration testing, vulnerability retesting and controlled attack simulations using APT TTPs (e.g. MITRE ATT&CK) to validate security controls and detection capabilities
• Work with security monitoring and technical teams to analyse outcomes, identify detection gaps and validate improvements
• Improve security testing processes, vendor performance and assessment quality

Required profile

• Bachelor's degree in computer science, information technology, engineering or a related discipline
• At least 6 years of relevant cyber security experience, preferably in security testing and assessment, including penetration testing or security control validation
• Experience coordinating penetration testing and security assessments with external vendors and internal stakeholders
• Hands-on experience in application and API penetration testing; exposure to GenAI application security testing is advantageous
• Experience with APT-based attack simulation and managing or supporting Bug Bounty programs and source code reviews is advantageous