Senior Cybersecurity Engineer, Offensive Security (Contract) at Public Service Division

, , Singapore -

Full Time

Start Date

Immediate

Expiry Date

28 Jul, 26

Salary

0.0

Posted On

30 Apr, 26

Experience

5 year(s) or above

Remote Job

Yes

Telecommute

Yes

Sponsor Visa

Skills

Penetration testing, Vulnerability management, Risk assessment, Source code review, Red teaming, DevSecOps, CI/CD pipelines, Cloud security, Container security, LLM security, Tenable Nessus, Prisma Cloud, SonarQube, NexusIQ, OWASP Top 10, Secure coding

Industry

IT Services and IT Consulting

Description

[What the role is] You will be part of the Offensive Security team, supporting MAS’ cybersecurity assurance efforts and the various workstreams of the team by identifying security gaps, validating risks, and driving remediation efforts across applications, systems and infrastructure. The role focuses on proactive security testing (penetration testing, vulnerability assessment, source code review, red teaming), vulnerability management, risk assessment, and raising cybersecurity awareness, working closely with the respective IT teams and stakeholders to ensure alignment with security policies and best practices. [What you will be working on] Lead vulnerability management initiatives including tracking and remediation across multiple systems using industry-standard tools. Conduct penetration testing, source code reviews with independent assessment and expert remediation guidance. Manage security testing projects, coordinating between external pen testers and internal stakeholders to ensure successful delivery. Perform security risk assessments and deliver actionable recommendations through technical discussions and presentations to teams and management. Integrate security practices into DevSecOps and CI/CD pipelines whilst providing expert guidance to application, system, and infrastructure teams. Continuously enhance vulnerability management processes and best practices. Drive security awareness through targeted education initiatives and process improvements for vulnerability management and secure coding practices. Stay ahead of emerging threats, evaluate new security technologies, and explore AI-assisted tools and LLM to enhance BAU tasks and operations. Identify, assess and advise on remediation of security vulnerabilities. As part of the shortlisting process for this role, you may be required to complete a medical declaration and/or undergo further assessment. This is a 2-Year contract position. All applicants will be notified on whether they are shortlisted or not within 4 weeks of the closing date of this job posting. [What we are looking for] At least 8 years of relevant experience in cybersecurity. Candidates with relevant certifications such as CISSP, CCSP, CRT, OSCP would be an added advantage. Technical competencies in Security testing (penetration testing, source code review, vulnerability scanning), Vulnerability management and risk assessment. Technical experience with security scanning tools such as Tenable Nessus, Prisma Cloud, SonarQube, NexusIQ etc. Strong understanding of common security vulnerabilities (e.g. OWASP Top 10), secure coding practices and vulnerability remediation. Strong understanding of DevSecOps concepts and CI/CD pipelines, Cloud, Container, LLM security testing. http://jobs.careers.gov.sg The Singapore Public Service plays a key role in the economic growth, progress and stability of Singapore by formulating and implementing government policies, as well as providing key public services. Whether you are a fresh graduate joining the workforce or an experienced professional, the Singapore Public Service offers a great variety of job opportunities for you. The work in the Public Service can be broadly categorised into the following sectors: Economic, Social, Security & External Relations, and Administration & Corporate Development. Be part of the team that shapes the future of Singapore. Log on and take your first step towards a career that matters! Need help? Please click here for assistance. Our team will contact you shortly!

Responsibilities

You will lead vulnerability management initiatives, conduct penetration testing, and perform security risk assessments across applications and infrastructure. Additionally, you will integrate security practices into DevSecOps pipelines and drive security awareness through education and process improvements.