Full-timeTech & engineering· Posted 25 May

Senior Cybersecurity Operations Specialist (Security Services)

GovTech SingaporeFrom company site

Salary

Not stated by the company

When

Full-time hours

Where

Singapore

Apply on company site

How well do you match? Check in 10 seconds →

Free with a WorkJio account: we compare your profile with this job and show what you already meet.

Share with a friend

Start: Not stated
Work mode: On-site
Experience: Experienced

About the role

This role sits in the Ministry CISO Office within GovTech's Cyber Security Group, where you will act as the domain expert for security testing and Secure-by-Design practices across the Ministry Family. You will connect governance with hands-on technical work, helping agencies move from reacting to threats toward a more resilient posture. It suits an experienced offensive and application security practitioner who enjoys setting standards and advising senior stakeholders.

What you'll do

Define and maintain the Ministry-wide framework for vulnerability assessment and penetration testing.
Create and roll out standard operating procedures for agency project teams engaging external security vendors and running internal testing cycles.

Know someone for this? Share it

WhatsApp Telegram Facebook LinkedIn

Develop quality rubrics for evaluating pen-testers, and sample testing reports and project work to check rigour across the Ministry Family.

Lead and carry out complex Red Teaming exercises and deep-dive penetration tests on high-impact systems.

Simulate real-world attacks using current adversary tactics, techniques and procedures to surface blind spots in prevention, detection and response.

Monitor the global threat landscape for emerging threats and evolving actor TTPs, and update testing standards as needed.

Establish Ministry-wide secure coding guidelines based on frameworks such as OWASP and SANS.

Lead the strategy for static application security testing and software composition analysis, including evaluating tools that automate vulnerability detection in code and third-party libraries.

Evaluate, recommend and guide the integration of security tools into agencies' DevOps pipelines.

Review and recommend systems that improve code quality so security is treated as part of clean code.

Keep up with technology changes such as cloud-native security and AI-driven development, and recommend systems that improve code quality and resilience.

Act as a trusted advisor to Agency CIOs, ACISOs and Project Owners to build a culture of secure-by-design.

Set up a platform for knowledge sharing among security practitioners in the Ministry Family to harmonise testing efforts.

Good to know

Based in Singapore.

Requirements

8 to 10 years of deep technical cybersecurity experience, focused on offensive and application security
Proven track record conducting penetration tests for web applications, IT systems (on-premises and cloud) and complex network architectures
Experience performing manual and automated source code reviews to find logic flaws, injection vulnerabilities and cryptographic weaknesses
Deep understanding of secure software development lifecycles and ability to read and analyse languages such as Java, Python, .NET and JavaScript
Proficiency with enterprise-grade SAST, DAST, SCA and VAPT tools such as Checkmarx, Fortify, SonarQube, Snyk and Burp Suite
Proficiency in manual and automated offensive security testing tools, with deep understanding of the MITRE ATT&CK framework and common TTPs

Benefits

Purposeful career contributing to Singapore's Smart Nation initiatives
Robust learning and development opportunities throughout the year

Apply on the company website

You will leave WorkJio. Never pay a fee or share your Singpass password, OTP or bank log-ins to apply.

Open application

Listed from GovTech Singapore’s own careers page and not yet verified by WorkJio. You apply on the company’s site. See all their roles.

Is this your company? Roles that show a salary rank higher on WorkJio. Claim or remove this listing

GovTech Singapore

Apply on site

Senior Cybersecurity Operations Specialist (Security Services)

About the role

What you'll do

Good to know

Requirements

Benefits

More jobs like this

Assoc Director, Engineering Lead, WRB Tech

SABRE Developer

Research Associate (AI for Science)

Senior Associate Director / Associate Director (End point specialist)

Agentic Systems Engineer - Manufacturing

Product Manager, Transaction Platforms Programme