Lead Consultant - Red Teaming & Penetration Testing

About the role

NCS, an AI tech services company and subsidiary of the Singtel Group, is hiring a Lead Consultant in Singapore. The consultant provides expert IT security consultancy and advisory services to help secure cyber assets such as networks, mobile and web applications and IoT devices. The work covers red teaming, security system configuration, source code review and penetration testing.

Key responsibilities

• Perform red teaming exercises that simulate real-world adversarial attacks, testing organisational defences, incident response capabilities and security awareness across people, process and technology.
• Design and run red team operations simulating advanced persistent threats (APTs) and real attack scenarios, emulating threat actor TTPs aligned with frameworks such as MITRE ATT&CK.
• Conduct multi-layered security assessments across network, application, cloud and physical security domains, and test SOC and incident response detection and response capabilities.
• Carry out penetration testing of web applications, mobile applications, APIs, network infrastructure and cloud environments, using both automated tools and manual techniques.
• Follow ethical hacking methodologies and standards including PTES, OWASP and OSSTMM, and identify weaknesses in configurations, code and security controls.
• Stay current with emerging threats and trends, develop custom tools, scripts and exploits, and mentor junior team members.

Required profile

• Relevant certifications such as OSCP, OSEP, OSWE, CRTO, CRTP or equivalent red teaming credentials are required.
• Experience with cloud security, red team operations, threat intelligence or purple team exercises is an advantage.