Senior Cyber Security Consultant – Penetration Tester

About the role

The Penetration Tester is responsible for executing full‑scope offensive security assessments across networks, applications, cloud environments, and operational technology. The role involves simulating advanced cyber‑attacks, bypassing modern defenses, and delivering actionable remediation strategies to strengthen the organization’s security posture.

Key responsibilities

• Conduct comprehensive penetration tests on applications, systems, and networks.
• Simulate real‑world cyberattacks to assess security posture.
• Provide detailed remediation strategies and follow up until report closure.
• Perform system commissioning security clearance reviews.
• Review and validate false positives from web penetration tests and secure code scans.
• Conduct security baseline hardening reviews across infrastructure and applications.
• Perform firewall rule reviews and application security configuration assessments.
• Assist in risk assessments, control gap analysis, and security plan development.
• Document security risks in the enterprise risk register.
• Evaluate compliance with security frameworks and regulatory requirements.

Required profile

• Bachelor’s degree in Cybersecurity, IT, Computer Science or related field (or equivalent experience).
• Minimum 3 years of hands‑on penetration testing experience.
• Singapore citizen or Permanent Resident status.
• CREST or OSCP certification (mandatory).

Required skills

• Advanced knowledge of penetration testing methodologies and tools.
• Strong exploit development and vulnerability research skills.
• Proficiency with Metasploit, Burp Suite, Kali Linux, and Nmap.
• Experience developing exploits and bypassing advanced security defenses.
• Strong understanding of system/application security risks and mitigation strategies.