Penetration Testing Engineer (Continuous Security Validation)

About the role

Assurity Trusted Solutions (ATS), a wholly owned subsidiary of the Government Technology Agency (GovTech), is looking for a Penetration Testing Engineer for a continuous security validation project. You will work alongside like-minded cybersecurity professionals on designing automated security validation frameworks, running continuous security tests and performing manual penetration testing.

Key responsibilities

• Design and implement automated security validation frameworks and pipelines.
• Execute continuous security testing across diverse IT environments.
• Perform manual penetration testing for complex scenarios and edge cases.
• Analyse security validation results and identify gaps in defensive controls.
• Develop and maintain testing methodologies based on current threat intelligence.
• Create comprehensive reports and strategic recommendations for security improvements.
• Collaborate with security teams to enhance detection and prevention capabilities.
• Document testing procedures and maintain a knowledge base of security validation practices.

Required profile

• Degree in Cybersecurity, Information Security, Computer Science or a related field, or equivalent experience and relevant certifications such as OSCP, SANS or cloud security.
• Minimum of 4 years' experience in offensive security or a related field, preferably in an enterprise or government environment.

Required skills

• Proficiency in penetration testing tools and methodologies.
• Deep understanding of the complete attack lifecycle, from reconnaissance to post-exploitation.
• Automation and scripting (Python, PowerShell, Bash).
• CI/CD pipelines and DevSecOps practices.
• Network protocols, operating systems and security architectures.
• Threat intelligence frameworks (MITRE ATT&CK).
• Vulnerability assessment and security scanning tools.

The remuneration package is commensurate with qualifications and experience. Only shortlisted candidates will be notified.