Search by job, company or skills

Senior Offensive Engineering Analyst

income insurance limited
2-4 Years
Singapore
  • Posted 4 hours ago
  • Be among the first 10 applicants

Job Description

Key Responsibilities

 JOB DESCRIPTION

  • Drive continuous Breach and Attack Simulation (BAS) and adversary-informed testing mapped to MITRE ATT&CK to validate preventive, detective, and response controls.
  • Collaborate with Cyber Threat Intelligence to develop intelligence-led attack simulations that identify weaknesses across Income's people, process, and technology pillars.
  • Translate BAS and adversary-based testing findings into actionable remediation recommendations for Security Operations and relevant internal teams, enabling improved prevention, detection, response, and overall control effectiveness.
  • Strengthen Income's overall cyber resilience through continuous assurance and control effectiveness assessments.
  • Support additional cyber assurance tasks as required, including security testing, hardening compliance reviews, technical risk assessments, process improvement initiatives, and other management-assigned activities.

Qualifications

  • Bachelor's Degree in technology, information or cyber risk management, information security or enterprise architecture.
  • Minimum of two years direct information security experience in cyber assurance, BAS, control validation, technical risk assessment, or similar end-user security roles.
  • Hands-on experience operating BAS platforms, designing safe test scenarios, analysing control effectiveness results, and driving remediation or improvement actions.
  • Strong automation and coding skillsets, including scripting with Python, PowerShell, APIs, workflow automation, and MCP or AI-assisted automation to improve security assurance processes.
  • Good understanding of secure configuration, hardening standards, vulnerability management, OWASP, MAS TRM, compliance review, and enterprise security operations.
  • Relevant certifications in security assurance, cloud, automation, offensive security, or risk management such as CISSP, OSCP, GPEN, GWAPT, CREST, or equivalent certifications preferred.

Competencies

  • Able to operate BAS end-to-end as a control assurance owner, from test planning and scenario configuration to results analysis, stakeholder follow-up, reporting, and closure tracking. BAS platforms may include Picus Security, Cymulate, or equivalent tools.
  • Strong understanding of threat behaviours, TTPs, MITRE ATT&CK mapping, and how these translate into practical control validation, detection engineering, and remediation priorities.
  • Able to translate BAS, vulnerability, hardening, and compliance findings into business impact, remediation priorities, measurable improvement actions, and management-ready reporting.
  • Keeps abreast of the financial-sector threat landscape, APT groups, and relevant threat actors, and applies these insights to enhance BAS testing and control assurance activities.
  • Strong hands-on automation capability, including scripting, API integration, data handling, workflow orchestration, MCP-enabled automation, and the ability to improve repeatability and efficiency of cyber assurance activities.
  • Good written communication skills, with the ability to explain security risks and assurance outcomes to technical and non-technical stakeholders.
  • Able to work independently as an outcome owner, engage vendors and internal teams effectively, and drive actions to completion across both BAU operations and project initiatives.

More Info

Job Type:
Permanent Job
Industry:
Insurance
Function:
Cybersecurity
Employment Type:
Full time

Job ID: 151786735

Last Updated: 30-07-2026 07:13:09 PM
Homejobs in SingaporeSenior Offensive Engineering Analyst

Similar Jobs

Senior Offensive Engineering Analyst

income insurance limited
Singapore, Bras Basah

Skills:

Apis, Vulnerability Management, Owasp, PowerShell, Python, MCP or AI-assisted automation, MAS TRM compliance review, enterprise security operations, secure configuration hardening standards

Beware of Scammers

We don’t charge money for job offers

Know More