Digital Security Researcher

ISD confronts and addresses threats to Singapore’s internal security and stability. For over 75 years, ISD and its predecessor organisations have played a central role in countering threats such as those posed by foreign subversive elements, spies, racial and religious extremists, and terrorists. A fulfilling and rewarding career awaits those who want to join in ISD’s critical mission of keeping Singapore safe, secure and sovereign for all Singaporeans. As a member of the Digital Security team, you will be responsible for working closely with internal stakeholders to perform red teaming exercises as part of white-hat penetration testing on systems to ensure developed systems are secured and hardened according to organizational and industrial standards. • For defensive purposes, perform red teaming assessments using proprietary and open-source tools to identify vulnerability of developed systems and endpoint devices and wireless communications (WIFI, Bluetooth and IoT) • Develop, conduct research on, and maintain proficiency in tools, techniques and vulnerabilities trends for red teaming • Understand and identify possible digital fingerprints, critical information, data and processes that must be protected in the context of system and network attack surface • Provide written and verbal description of the identified security defects identified, articulate risks and propose mitigation measures • Applicants with no experience may apply • Ability to work independently as well as in a team setting • Relevant experience or knowledge in one or more of the following areas would be advantageous: - Strong programming experience, and familiarity with scripting languages such as Python - Knowledge of and familiarity with Linux-like operating systems - Knowledge of processes, procedures and methods to research, analyse and disseminate threat intelligence information - Knowledge of tools used for network security analysis - Knowledge of network concepts - Wide Knowledge of server technologies including commonly used web servers, database servers, cloud storage and server-to-server secured network communications - Reverse engineering experience in mobile applications, micro-services and Docker • Only Singaporeans need apply We wish to inform that only shortlisted candidates will be notified.