Penetration Tester-Govt Clerance
JobOverview
Weseek a Penetration Testing with CAT1 clearance to lead VAPT for Singaporegovernment and critical infrastructure sectors. You will execute full-scopeattacks (networks, apps, cloud, OT), bypass advanced defenses, and deliveractionable remediation strategies. This role requires CREST/OSCP certification,deep exploit development skills, and experience with GovTech cybersecurityframeworks.
CoreResponsibilities
AdvancedThreat Emulation:
1. CAT1-clearedengagements:
2. Network:Breach segmented govt networks (e.g., air-gapped systems)
3. Applications:Exploit web/mobile apps (SCADA interfaces, GovTech portals)
4. Cloud:Attack AWS GovCloud/Azure Government environments
5. OT:ICS/SCADA system penetration (Siemens, Rockwell)
6. Developcustom malware/exploits (C++, Python) to evade EDR/XDR.
RedTeam Operations:
1. Leadmulti-vector campaigns:
2. Phishing(Evade Proofpoint/MS ATP)
3. Physicalsecurity bypass (RFID cloning, access control spoofing)
4. Wirelessattacks (802.1X, WPA3-Enterprise)
5. DocumentTTPs aligned with MITRE ATT&CK for ICS/Enterprise.
GovtCompliance & Reporting:
1. Aligntests with IM8, CSA Red Teaming Guidelines, and NIST SP 800-115.
2. Deliverexecutive briefings to CISOs with exploit demos.
3. Createremediation playbooks
Research& Development:
1. Reverseengineer firmware (Binwalk, Ghidra) for 0-day discovery.
2. Contributeto ASEAN CERT advisories (e.g., SingCERT).
TechnicalRequirements
Non-NegotiableCredentials
1. CAT1Security Clearance
2. ActiveCertifications: OSCP or CREST CRT/CCT (Inf/App)
3. 2+years in pentesting
ToolProficiency
1. Exploitation- Metasploit Pro, Cobalt Strike, Burp Suite Pro, PowerSploit
2. Post-Exploit- BloodHound, Mimikatz, Impacket, Covenant C2
3. Forensics- Volatility, Wireshark, CHIRP (ICS)
4. Wireless- HackRF One, Proxmark3, Wi-Fi Pineapple
5. Cloud- Pacu (AWS), MicroBurst (Azure), GCP IAM Exploit Toolkit
PreferredQualifications
1. Certifications:OSCE³, CREST CCT Gold, OSCP
2. GovtFramework Experience: IM8 Penetration Test Guidelines, CSA Cyber Essentials
3. PublicContributions: CVEs, exploit-db submissions, conference talks (Black Hat Asia,DEFCON)