Penetration Tester-Govt Clerance

Job Overview We seek a Penetration Testing with CAT1 clearance to leadVAPT for Singapore government and critical infrastructure sectors. You willexecute full-scope attacks (networks, apps, cloud, OT), bypass advanceddefenses, and deliver actionable remediation strategies. This role requiresCREST/OSCP certification, deep exploit development skills, and experience withGovTech cybersecurity frameworks. Core-Responsibilities Advanced Threat Emulation: 1. CAT1-clearedengagements: 2. Network: Breach segmented govt networks(e.g., air-gapped systems) 3. Applications: Exploit web/mobile apps(SCADA interfaces, GovTech portals) 4. Cloud: Attack AWS GovCloud/AzureGovernment environments 5. OT:ICS/SCADA system penetration(Siemens, Rockwell) 6. Develop custom malware/exploits (C++,Python) to evade EDR/XDR. Reteam Operations: 1. Lead multi-vector campaigns: 2. Phishing (Evade Proofpoint/MS ATP) 3. Physical security bypass (RFID cloning,access control spoofing) 4. Wireless attacks (802.1X,WPA3-Enterprise) 5. Document TTPs aligned with MITREATT&CK for ICS/Enterprise. Govt Compliance & Reporting: 1. Align tests with IM8, CSA Red TeamingGuidelines, and NIST SP 800-115. 2. Deliver executive briefings to CISOswith exploit demos. 3. Create remediation playbooks Research & Development: 1. Reverse engineer firmware (Binwalk,Ghidra) for 0-day discovery. 2. Contribute to ASEAN CERT advisories(e.g., Sing CERT). Technical Requirements Non-Negotiable Credentials 1. CAT1Security Clearance 2. Active Certifications: OSCP or CRESTCRT/CCT (Inf/App) 3. 2+years in pentesting Tool Proficiency 1. Exploitation- Metasploit Pro, CobaltStrike, Burp Suite Pro, Powersport 2. Post-Exploit- Bloodhound, Mimi Katz,Impacket, Covenant C2 3. Forensics- Volatility, Wireshark, CHIRP(ICS) 4. Wireless- HackRF One, Proxmark3, Wi-FiPineapple 5. Cloud- Pacu (AWS), MicroBurst (Azure),GCP IAM Exploit Toolkit Preferred Qualifications 1. Certifications:OSCE³, CREST CCT Gold,OSCP 2. Govt Framework Experience: IM8Penetration Test Guidelines, CSA Cyber Essentials 3. Public Contributions: CVEs, exploit-dbsubmissions, conference talks (Black Hat Asia, DEFCON)