Penetration Tester-Govt Clerance

Job Overview

We seek a Penetration Testing with CAT1 clearance to leadVAPT for Singapore government and critical infrastructure sectors. You willexecute full-scope attacks (networks, apps, cloud, OT), bypass advanceddefenses, and deliver actionable remediation strategies. This role requiresCREST/OSCP certification, deep exploit development skills, and experience withGovTech cybersecurity frameworks.

Core-Responsibilities

Advanced Threat Emulation:

1. CAT1-clearedengagements:
2. Network: Breach segmented govt networks(e.g., air-gapped systems)
3. Applications: Exploit web/mobile apps(SCADA interfaces, GovTech portals)
4. Cloud: Attack AWS GovCloud/AzureGovernment environments
5. OT:ICS/SCADA system penetration(Siemens, Rockwell)
6. Develop custom malware/exploits (C++,Python) to evade EDR/XDR.

Reteam Operations:

1. Lead multi-vector campaigns:
2. Phishing (Evade Proofpoint/MS ATP)
3. Physical security bypass (RFID cloning,access control spoofing)
4. Wireless attacks (802.1X,WPA3-Enterprise)
5. Document TTPs aligned with MITREATT&CK for ICS/Enterprise.

Govt Compliance & Reporting:

1. Align tests with IM8, CSA Red TeamingGuidelines, and NIST SP 800-115.
2. Deliver executive briefings to CISOswith exploit demos.
3. Create remediation playbooks

Research & Development:

1. Reverse engineer firmware (Binwalk,Ghidra) for 0-day discovery.
2. Contribute to ASEAN CERT advisories(e.g., Sing CERT).

Technical Requirements

Non-Negotiable Credentials

1. CAT1Security Clearance
2. Active Certifications: OSCP or CRESTCRT/CCT (Inf/App)
3. 2+years in pentesting

Tool Proficiency

1. Exploitation- Metasploit Pro, CobaltStrike, Burp Suite Pro, Powersport
2. Post-Exploit- Bloodhound, Mimi Katz,Impacket, Covenant C2
3. Forensics- Volatility, Wireshark, CHIRP(ICS)
4. Wireless- HackRF One, Proxmark3, Wi-FiPineapple
5. Cloud- Pacu (AWS), MicroBurst (Azure),GCP IAM Exploit Toolkit

Preferred Qualifications

1. Certifications:OSCE³, CREST CCT Gold,OSCP
2. Govt Framework Experience: IM8Penetration Test Guidelines, CSA Cyber Essentials
3. Public Contributions: CVEs, exploit-dbsubmissions, conference talks (Black Hat Asia, DEFCON)