C

Cyber Security Agency of Singapore

Protects national cyberspace and digital infrastructure

Lead Cybersecurity Consultant - Cybersecurity Certification Centre, Assurance

Offensive Security & TestingConfirmed live in the last 24 hours
Full-timeSingaporeNo salary listedIn-person

About the Job

Requirements

  • Minimum 10–15 years of experience in cybersecurity, including at least 10 years in security evaluation, penetration testing, or product security assessment.
  • Bachelor’s degree in Engineering, Computer Science, Information Systems, Mathematics, or a relevant technical discipline.
  • Strong background in offensive security research, advanced penetration testing techniques, and security assessments of emerging technologies and novel systems.
  • Experience conducting security assessments using state-of-the-art security attack techniques.
  • Deep technical expertise in vulnerability analysis and penetration testing, including the ability to develop custom attack techniques, adapt published attacks, and conduct security assessments using state-of-the-art attack techniques.
  • Experience developing custom tools, automation frameworks, or technical solutions for operational use.
  • Mentoring and knowledge-transfer abilities.
  • Communication skills for technical and non-technical audiences.
  • Ability to work under pressure.
  • Creative problem-solving and the ability to use unconventional approaches.
  • Collaborative working skills and the ability to work independently, take initiative, and lead complex technical projects.

Responsibilities

  • Develop and implement technical competency frameworks defining security evaluation standards across product categories, including enterprise systems, consumer Internet of Things devices, and medical equipment.
  • Mentor the team and develop its expertise in advanced testing methodologies and security assessment approaches for specialised domains, including cryptographic implementations, network security solutions, Internet of Things ecosystems, and medical-device cybersecurity.
  • Drive research and development initiatives to identify technical gaps, create attack techniques and methodologies, set research directions, and collaborate with academia to translate research outcomes into practical applications.
  • Build in-house solutions, including tools for processing applications, artificial-intelligence-enabled testing tools, and automation systems, to improve evaluation efficiency and capabilities.
  • Conduct research into advanced attack vectors and techniques for high-assurance security evaluations.
  • Provide technical leadership for complex evaluation projects across schemes.
  • Conduct advanced penetration testing and vulnerability assessments.
  • Apply newly developed attack techniques to complex evaluation projects.
  • Provide Approved Testing Laboratories with technical guidance on complex evaluations.
  • Validate security controls against state-of-the-art attacks.
  • Develop custom testing approaches for novel product categories and emerging technologies, including rapid technical assessments of emerging payment systems, fintech solutions, and digital services.
  • Conduct technical assessments of emerging technologies for cybersecurity implications.
  • Research and analyse security requirements for new product categories and emerging technologies, such as artificial intelligence and machine learning, quantum computing, 5G/6G, and autonomous systems.
  • Translate technical findings into practical scheme requirements.
  • Provide technical input for international standards development and mutual recognition arrangements.
  • Lead Singapore’s initiative to harmonise cybersecurity requirements for Common Criteria evaluators and certifiers internationally.
  • Develop partnerships with academic institutions and industry for cybersecurity research.
  • Survey the technological landscape and recommend opportunities for new schemes.

Desired Qualifications

  • Experience with product security assessment or security evaluation, such as Common Criteria or similar certification schemes, is preferred but not required.
  • Certifications such as Certified Ethical Hacker (CEH), Licensed Penetration Tester Master (LPT), Offensive Security Certified Professional (OSCP), GIAC Penetration Tester (GPEN), GIAC Exploit Researcher and Advanced Penetration Tester (GXPN), or CompTIA PenTest+ are a plus.

About the Company

Cyber Security Agency of Singapore

Protects national cyberspace and digital infrastructure

CSA protects Singapore’s cyberspace by coordinating national cyber defense and resilience efforts across government, industry, and the public. It develops policies, conducts incident response and exercises, and builds capabilities like threat intelligence and cyber safety programs to keep critical infrastructure and everyday digital life secure. As a government agency under the Prime Minister’s Office and the Ministry of Communications and Information, it has formal national authority and cross-ministry reach, focusing on nationwide defense rather than selling products or services. Its goal is to keep Singapore’s cyberspace safe and secure so national security is protected, the digital economy can grow, and people can enjoy a secure digital way of life.

Company size
201-500
Company stage
Not listed
Total funding
Not listed
Headquarters
Singapore, Singapore
Founded
2015

Recently Posted Jobs

Explore more opportunities at Cyber Security Agency of Singapore

See more jobs