Associate/Senior Associate – Cybersecurity Attack & Penetration

About the role

EY Singapore is seeking motivated penetration testers to join its Cybersecurity Attack & Penetration team. You will work within engagement teams delivering independent assessments and implementing cyber solutions for a diverse client base, helping them strengthen their security posture and business resilience.

Key responsibilities

• Perform cybersecurity threat modelling to identify potential attack vectors.
• Conduct web, mobile, IT, OT, and IoT penetration testing.
• Execute source code reviews and red‑team assessments.
• Carry out social engineering exercises and support incident response activities.
• Provide clear, pragmatic recommendations to remediate identified vulnerabilities.

Required profile

• Degree in Computer Science, Computer Engineering, Information Technology or equivalent.
• Minimum of 2 years of professional experience in penetration testing.
• Relevant industry‑recognised certifications (e.g., OSCP, OSWE, OSCE, OSEE, CREST CRT/CCT).
• Strong communication skills, curiosity, integrity, and a collaborative mindset.

Required skills

• Cybersecurity threat modelling
• Web application penetration testing
• Mobile application penetration testing
• IT and OT network penetration testing
• IoT penetration testing
• Source code review
• Red team assessment
• Social engineering
• Incident response