Cybersecurity Consultant (Offensive Security)

About the role

ITSEC Asia is looking for a Cybersecurity Consultant (Offensive Security) to join its growing team in Singapore; only candidates currently residing in Singapore may apply. The role offers exposure to a wide range of security assessments across enterprise, cloud, government and critical environments, with an interest in people who want to use AI, automation and emerging technologies to improve penetration testing.

Key responsibilities

• Conduct penetration testing and vulnerability assessments across web applications, APIs, mobile apps, networks, cloud environments and other platforms
• Support assessments involving IT, OT, IoT and other specialised environments
• Identify, validate and demonstrate vulnerabilities, assess their technical and business impact and document findings clearly
• Prepare professional penetration-testing reports with findings, risk implications, evidence and remediation recommendations
• Present technical findings to clients and explain risks and remediation to technical and non-technical stakeholders
• Carry out remediation verification and retesting
• Use AI-assisted testing, automation and scripting responsibly, while validating results
• Keep up with emerging vulnerabilities, tools and methodologies, and contribute to the team's testing methods, knowledge base and tooling

Required profile

• Diploma or degree in Cybersecurity, Information Security, Computer Science, Engineering or a related field
• Ideally around 3 years of hands-on penetration-testing or offensive-security experience; strong juniors with practical skills and a willingness to learn are encouraged to apply
• CREST Registered Tester (CRT), OSCP or a comparable offensive-security certification strongly preferred
• Singapore citizens are preferred, especially those eligible to support sensitive or classified government engagements; prior experience on Singapore Government, highly classified or critical-infrastructure projects is highly advantageous

Required skills

• Practical understanding of penetration-testing methodologies, tools and techniques
• Hands-on experience in web application, API, network, Active Directory, mobile or cloud penetration testing is advantageous
• Knowledge of OT, ICS, IoT or critical-infrastructure security testing is highly advantageous
• Strong analytical, troubleshooting and problem-solving abilities, and the ability to write clear technical reports
• Interest in AI, automation and scripting, and proven contributions to security research or the community (e.g. bug bounties, CVEs, CTFs, write-ups)

What we offer

• On-the-job training, technical mentorship and exposure to experienced cybersecurity professionals
• Work on diverse, technically challenging penetration-testing engagements
• Opportunities to strengthen consulting, client communication and report-writing skills