Penetration Tester, Advanced Cybersecurity Division

[What the role is]

[What you will be working on]

• Conceptualise, design and deliver end-to-end Penetration Testing programmes to proactively identify and address security vulnerabilities across IMDA's digital infrastructure.
• Research attacker Tactics, Techniques and Procedures (TTPs) to continuously enhance existing penetration testing techniques, procedures and tools, ensuring assessments remain relevant against the latest threat landscape.
• Participate in and plan attack scenarios for cyber security exercises, simulating real-world adversarial conditions to test and improve organisational readiness and incident response capabilities.
• Perform Penetration Testing in close coordination with asset owners, ensuring assessments are conducted in a controlled and responsible manner with minimal disruption to operations.
• Draft comprehensive reports and present findings, recommendations and remediation strategies clearly to both technical teams and senior stakeholders.

[What we are looking for]

• Background in Information Security, Engineering, Computer Science or an equivalent discipline.
• Minimum 5 years of hands-on work experience in information security, with demonstrated experience in penetration testing or offensive security roles.
• Possession of OSCP certification or equivalent industry-recognised offensive security certification.
• Experience in networks and cloud technologies would be a distinct advantage, particularly in the context of emerging technologies such as 5G.
• Strong analytical mindset with a passion for tackling complex cybersecurity challenges and staying ahead of the evolving threat landscape.
• Good communication and interpersonal skills, with the ability to articulate technical findings clearly to both technical and non-technical audiences.