Cybersecurity Consultant (CREST CRT & OSCP)

About the role

Firmus is seeking a full‑time, on‑site Cybersecurity Consultant in Singapore. The role focuses on penetration testing and security consulting for a diverse client base, ensuring robust protection against evolving cyber threats.

Key responsibilities

• Plan and execute application and network penetration tests.
• Perform vulnerability assessments and analyse security configurations.
• Prepare test scopes, document findings and develop remediation recommendations.
• Present clear, actionable reports to technical and non‑technical stakeholders.
• Collaborate with internal teams on security assessments and contribute to methodology and toolset improvements.
• Stay current with emerging threats, exploits and defensive techniques.
• Support pre‑sales activities and client engagements as needed.

Required profile

• Strong foundation in cybersecurity, threat landscapes and risk management.
• Hands‑on experience in application security, network security and vulnerability assessment.
• Valid CREST Registered Tester (CRT) and Offensive Security Certified Professional (OSCP) certifications.
• Bachelor’s degree in Computer Science, Information Security or related field, or equivalent practical experience.
• Consulting or client‑facing experience is an advantage.

Required skills

• Web and mobile penetration testing, secure code review.
• Network penetration testing, secure configuration review, network protocols.
• Vulnerability assessment using industry‑standard tools.
• Burp Suite, Nmap, Metasploit, Wireshark.
• Scripting/automation: Python, Bash, PowerShell.