Senior Cybersecurity Consultant – Attack Simulation Group

About the role

The Attack Simulation Group (ASG) within the Cyber Security Agency of Singapore is seeking a senior, hands‑on cybersecurity professional to design and execute realistic attack simulations that protect the nation’s critical information infrastructure.

Key responsibilities

• Lead and conduct penetration testing, red‑team and adversary‑simulation activities across web, mobile, infrastructure, cloud, OT and telecommunications environments.
• Execute realistic attack scenarios to assess the resilience of Critical Information Infrastructure (CII) supporting essential services.
• Support purple‑team efforts by translating offensive findings into actionable detection and response improvements.
• Manage engagements end‑to‑end, including planning, execution, reporting and technical debriefs with stakeholders.
• Mentor junior consultants and raise the overall technical standard of the team.
• Drive continuous improvement of testing methodologies, tooling and research, and contribute to strategic initiatives, procurement and industry outreach as needed.

Required profile

• Extensive hands‑on experience in offensive security and realistic attack simulations.
• Strong analytical mindset with the ability to adapt techniques to diverse technical domains.
• Proven ability to communicate complex findings to technical and non‑technical audiences.
• Willingness to continuously learn and contribute to the evolution of attack simulation practices.

Required skills

• Penetration testing
• Red teaming
• Cloud security
• Operational technology (OT) security
• Telecommunications security

What we offer

• Work on nationally significant systems rarely accessible outside government.
• Deep, technically challenging projects that prioritize realism and security outcomes.
• Specialised training and development opportunities to expand technical capabilities.
• Contribution to Singapore’s cyber‑resilience mission.