Monetary Authority of Singapore

Senior Cybersecurity Engineer, Offensive Security (Contract)

Fixed Terms

Closing on 14 May 2026

What the role is

You will be part of the Offensive Security team, supporting MAS’ cybersecurity assurance efforts and the various workstreams of the team by identifying security gaps, validating risks, and driving remediation efforts across applications, systems and infrastructure.

The role focuses on proactive security testing (penetration testing, vulnerability assessment, source code review, red teaming), vulnerability management, risk assessment, and raising cybersecurity awareness, working closely with the respective IT teams and stakeholders to ensure alignment with security policies and best practices.

What you will be working on

Lead vulnerability management initiatives including tracking and remediation across multiple systems using industry-standard tools.
Conduct penetration testing, source code reviews with independent assessment and expert remediation guidance.
Manage security testing projects, coordinating between external pen testers and internal stakeholders to ensure successful delivery.
Perform security risk assessments and deliver actionable recommendations through technical discussions and presentations to teams and management.
Integrate security practices into DevSecOps and CI/CD pipelines whilst providing expert guidance to application, system, and infrastructure teams.
Continuously enhance vulnerability management processes and best practices.
Drive security awareness through targeted education initiatives and process improvements for vulnerability management and secure coding practices.
Stay ahead of emerging threats, evaluate new security technologies, and explore AI-assisted tools and LLM to enhance BAU tasks and operations.
Identify, assess and advise on remediation of security vulnerabilities.

As part of the shortlisting process for this role, you may be required to complete a medical declaration and/or undergo further assessment.

This is a 2-Year contract position. All applicants will be notified on whether they are shortlisted or not within 4 weeks of the closing date of this job posting.

What we are looking for

At least 8 years of relevant experience in cybersecurity. Candidates with relevant certifications such as CISSP, CCSP, CRT, OSCP would be an added advantage.
Technical competencies in Security testing (penetration testing, source code review, vulnerability scanning), Vulnerability management and risk assessment.
Technical experience with security scanning tools such as Tenable Nessus, Prisma Cloud, SonarQube, NexusIQ etc.
Strong understanding of common security vulnerabilities (e.g. OWASP Top 10), secure coding practices and vulnerability remediation.
Strong understanding of DevSecOps concepts and CI/CD pipelines, Cloud, Container, LLM security testing.

About your application process

This job is closing on 14 May 2026.

If you do not hear from us within 4 weeks of the job ad closing date, we seek your understanding that it is likely that we are not moving forward with your application for this role. We thank you for your interest and would like to assure you that this does not affect your other job applications with the Public Service. We encourage you to explore and apply for other roles within Monetary Authority of Singapore or the wider Public Service.

About Monetary Authority of Singapore

MAS is the central bank of Singapore. Our mission is to promote sustained non-inflationary economic growth, and a sound and progressive financial centre.

Learn more about Monetary Authority of Singapore