Digital Security Researcher

What The Role Is ISD confronts and addresses threats to Singapore’s internal security and stability. For over 75 years, ISD and its predecessor organisations have played a central role in countering threats such as those posed by foreign subversive elements, spies, racial and religious extremists, and terrorists. A fulfilling and rewarding career awaits those who want to join in ISD’s critical mission of keeping Singapore safe, secure and sovereign for all Singaporeans.

What You Will Be Working On As a member of the Digital Security team, you will be responsible for working closely with internal stakeholders to perform red teaming exercises as part of white-hat penetration testing on systems to ensure developed systems are secured and hardened according to organizational and industrial standards.

• For defensive purposes, perform red teaming assessments using proprietary and open-source tools to identify vulnerability of developed systems and endpoint devices and wireless communications (WIFI, Bluetooth and IoT)
• Develop, conduct research on, and maintain proficiency in tools, techniques and vulnerabilities trends for red teaming
• Understand and identify possible digital fingerprints, critical information, data and processes that must be protected in the context of system and network attack surface
• Provide written and verbal description of the identified security defects identified, articulate risks and propose mitigation measures

What We Are Looking For

• Applicants with no experience may apply
• Ability to work independently as well as in a team setting
• Relevant experience or knowledge in one or more of the following areas would be advantageous:
• Strong programming experience, and familiarity with scripting languages such as Python
• Knowledge of and familiarity with Linux-like operating systems
• Knowledge of processes, procedures and methods to research, analyse and disseminate threat intelligence information
• Knowledge of tools used for network security analysis
• Knowledge of network concepts
• Wide Knowledge of server technologies including commonly used web servers, database servers, cloud storage and server-to-server secured network communications
• Reverse engineering experience in mobile applications, micro-services and Docker
• Only Singaporeans need apply

We wish to inform that only shortlisted candidates will be notified.