Senior Cyber Security Consultant (ITSO/SOC)

About the role

CrimsonLogic is seeking a Senior Cyber Security Consultant (ITSO/SOC) to lead full‑scope offensive security assessments across networks, applications, cloud environments and operational technology. The role involves simulating advanced cyber‑attacks, bypassing modern defenses and delivering actionable remediation to strengthen the organisation’s security posture.

Key responsibilities

• Conduct comprehensive penetration tests on applications, systems, networks and cloud/OT environments.
• Simulate real‑world cyber‑attacks to evaluate and improve defensive measures.
• Provide detailed remediation recommendations and track resolution until report closure.
• Review and validate false positives from web penetration tests and secure code scans.
• Perform firewall rule reviews, security baseline hardening and application security configuration assessments.
• Assist in risk assessments, control gap analysis and development of security plans.
• Document security risks in the enterprise risk register and ensure compliance with relevant frameworks and regulations.

Required profile

• Bachelor’s degree in Cybersecurity, IT, Computer Science or related field (or equivalent experience).
• Minimum 3 years of hands‑on penetration testing experience.
• Only Singapore citizens or permanent residents will be considered.
• Mandatory CREST or OSCP certification.

Required skills

• Penetration testing of networks, web applications and cloud/OT environments.
• Knowledge of security frameworks such as NIST and ISO 27001.
• Firewall rule analysis and security baseline hardening.
• Risk assessment, control gap analysis and security policy development.
• Experience with secure code scanning and false‑positive validation.