Job Description

[What the role is]

You will be part of the Offensive Security team, supporting MAS’ cybersecurity assurance efforts and the various workstreams of the team by identifying security gaps, validating risks, and driving remediation efforts across applications, systems and infrastructure.

The role focuses on proactive security testing (penetration testing, vulnerability assessment, source code review, red teaming), vulnerability management, risk assessment, and raising cybersecurity awareness, working closely with the respective IT teams and stakeholders to ensure alignment with security policies and best practices.

[What you will be working on]

• Lead vulnerability management initiatives including tracking and remediation across multiple systems using industry-standard tools.

• Conduct penetration testing, source code reviews with independent assessment and expert remediation guidance.

• Manage security testing projects, coordinating between external pen testers and internal stakeholders to ensure successful delivery.

• Perform security risk assessments and deliver actionable recommendations through technical discussions and presentations to teams and management.

• Integrate security practices into DevSecOps and CI/CD pipelines whilst providing expert guidance to application, system, and infrastructure teams.

• Continuously enhance vulnerability management processes and best practices.

• Drive security awareness through targeted education initiatives and process improvements for vulnerability management and secure coding practices.

• Stay ahead of emerging threats, evaluate new security technologies, and explore AI-assisted tools and LLM to enhance BAU tasks and operations.

• Identify, assess and advise on remediation of security vulnerabilities.

As part of the shortlisting process for this role, you may be required to complete a medical declaration and/or undergo further assessment.

This is a 2-Year contract position. All applicants will be notified on whether they are shortlisted or not within 4 weeks of the closing date of this job posting.

[What we are looking for]

• At least 8 years of relevant experience in cybersecurity. Candidates with relevant certifications such as CISSP, CCSP, CRT, OSCP would be an added advantage.

• Technical competencies in Security testing (penetration testing, source code review, vulnerability scanning), Vulnerability management and risk assessment.

• Technical experience with security scanning tools such as Tenable Nessus, Prisma Cloud, SonarQube, NexusIQ etc.

• Strong understanding of common security vulnerabilities (e.g. OWASP Top 10), secure coding practices and vulnerability remediation.

• Strong understanding of DevSecOps concepts and CI/CD pipelines, Cloud, Container, LLM security testing.