Cybersecurity Consultant

About the role

CPS Asia, part of Thales, provides cybersecurity services and solutions to regional clients with a strong focus on national critical infrastructure. It is looking for a Cybersecurity Consultant in Singapore who can identify and mitigate cyber risks and threats, and who has experience implementing a wide range of cybersecurity products and solutions in large, complex system developments. The role suits a problem solver who enjoys applying cybersecurity principles to organisational requirements.

Key responsibilities

• Conduct security assessments of clients' IT environments to identify vulnerabilities and risks
• Carry out requirement-gathering sessions
• Run host configuration reviews (HCR) to check hardening compliance across asset types
• Perform vulnerability assessments and penetration tests on various assets
• Act as Subject Matter Expert, giving offensive security advice to ensure successful project delivery
• Report security findings clearly in detailed reports and presentations for technical and non-technical audiences
• Help clients implement security controls and integrate systems with enterprise-level cybersecurity measures
• Advise clients on cybersecurity policies and procedures and give guidance to their IT teams on best practices
• Stay up to date with emerging threats and trends

Required profile

• Diploma or Bachelor's degree in Computer Science, Cybersecurity or a related field
• Good experience in IT systems and architecture
• Strong analytical and problem-solving skills, excellent written and verbal communication, and ability to work independently and in a team
• Willing to travel to client sites locally and overseas, and to work during engineering hours (10pm-5am) when required
• Committed to continuous self-directed learning and obtaining certifications; candidates without required certification but with relevant experience may apply
• Preferred: experience in aviation, transportation, defence, public security and/or energy sectors

Required skills

• Familiarity with hardening benchmarks and security testing methodologies
• Knowledge of offensive security tools and operating systems such as Kali Linux, Parrot OS, Burp Suite and Nessus
• Basic scripting knowledge for offensive security
• Knowledge of cybersecurity standards and frameworks such as IM(ICT&SS), CCoP and NIST