Kerja Sepenuh Masa, Manager (Penetration Test - Vulnerability Assessment) - DIS di Ministry Of Defence Of Singapore - Maukerja

What The Role Is

You are responsible for assisting in the execution of vulnerability assessments and penetration tests on Military Systems and Critical Information Infrastructures (CIIs). You will carry out technical assessments, identify vulnerabilities, and contribute to the overall cybersecurity of the Digital and Intelligence Service (DIS).

What You Will Be Working On

• Conduct comprehensive Penetration Testing (PT), Vulnerability Assessments (VA), and Source Code Security Reviews on IT assets, including infrastructure, web applications, and military applications
• Develop tailored security assessment tools and scripts to enhance testing capabilities and address evolving threat vectors
• Document findings, conduct analysis, and prepare detailed technical reports, including executive summaries for various stakeholders
• Collaborate with security engineers, developers, and other stakeholders to provide actionable guidance on remediating identified security risks and vulnerabilities
• Provide expertise in the design and implementation of security controls across applications, infrastructure, and network systems
• Develop and deliver specialised training and awareness programmes to elevate the cybersecurity capabilities of the Singapore Armed Forces (SAF) personnel, with opportunities for growth in leadership and knowledge-sharing in the military cybersecurity context
• Maintain up-to-date knowledge of emerging threats, security best practices, and industry-standard frameworks
  
  

Challenge(s)

• Acquiring in-depth knowledge of complex military systems and CIIs, and effectively applying it in penetration tests
• Managing multiple tasks and assessments within tight deadlines, while maintaining the quality of work
• Ensuring seamless collaboration and communication with senior team members to meet project goals
  
  

What We Are Looking For

• Education in Information Security, Computer Science, IT, or a related field is preferred
• Industry-recognised certifications such as CREST CRT or GPEN are advantageous
• Prior experience conducting security assessments on application infrastructure, networks, and cloud-based systems is advantageous
• Track record of identifying and disclosing vulnerabilities, or recognition in Capture-The-Flag (CTF) competitions, is advantageous
• Strong understanding of web application, infrastructure, and network security architecture
• Proficiency in scripting languages such as Python, PowerShell, JavaScript, VBScript, Ruby, or Perl is advantageous
• Proficiency with tools such as BurpSuite, Metasploit, Nexpose, Nessus, and other industry-standard penetration testing and vulnerability assessment tools is advantageous
• Excellent communication and presentation skills, with a focus on conveying complex security findings to both technical and non-technical stakeholders
• Demonstrated ability to work independently and collaboratively within cross-functional teams
• Highly analytical, self-driven, and committed to continuous learning and skill enhancement
  
  

Appointment will be commensurate with your experience.

Only shortlisted candidates will be notified.