Security Testing & Assurance Specialist (VAPT, OSCP+ Cert)

NCS Pte Ltd; Hong Kong; On-site; HKD 360,000 - 720,000; Full time

Job summary

NCS Pte Ltd is seeking a skilled security professional to conduct technical security assessments across APAC clients. You will perform penetration testing, source code review, and security configuration analysis to identify risks and actionable improvements.

Work closely with clients and internal teams to deliver effective security solutions, audits, and clear findings for both technical and non-technical stakeholders. Strong tooling and methodology expertise required.

Qualifications

• Degree in cybersecurity or related field preferred; diploma or OSCP+ considered.
• Experience in penetration testing, code review, and host security assessments.
• Strong expertise in security testing tools and frameworks (Metasploit, Kali, Burp, Nessus).
• Scripting skills (Python, Bash, PowerShell) for automation.
• Understanding of web apps, networks, and the OSI model.
• Familiarity with OWASP Web Security Testing Guide (OWSTG) and PTES.
• Certifications such as OSCP or CREST CRT are advantageous.

Responsibilities

• Conduct technical security assessments, including penetration testing, code review, and configuration analysis.
• Identify and assess vulnerabilities using standard security processes and tools.
• Collaborate with clients and internal teams to deliver effective security solutions and recommendations.
• Perform compliance audits and system reviews against best practices and security policies.
• Present security findings through detailed reports for technical and non-technical stakeholders.

Skills

Penetration testing

Code review

Security testing

Scripting: Python

Kali Linux

Burp Suite

Metasploit

Nessus

Education

Bachelor's degree in cybersecurity or related field

Diploma or OSCP+ certificate equivalent

OSCP/CREST CRT advantageous

Tools

Metasploit

Burp Suite

Kali Linux

OWASP ZAP

Nessus/Tenables Nessus

Job description

NCS is a leading technology services firm that operates across the Asia Pacific region in over 20 cities, providing consulting, digital services, technology solutions, and more. We believe in harnessing the power of technology to achieve extraordinary things, creating lasting value and impact for our communities, partners, and people. Our diverse workforce of 13,000 has delivered large-scale, mission-critical, and multi-platform projects for governments and enterprises in Singapore and the APAC region.

Job Description

• Conduct technical security assessments, including penetration testing, source code review, and security configuration analysis.
• Utilize industry-recognized processes and tools to identify and assess security vulnerabilities, aligning with strategic, tactical, and operational security objectives.
• Work closely with clients and internal teams to deliver eective security solutions and recommendations.
• Perform compliance audits and system reviews against industry best practices, security policies, and procedural guidelines.
• Clearly articulate security findings through detailed reports and presentations, tailored for both technical and non-technical stakeholders.

Qualifications

• A degree in cybersecurity, computer science, or a related field is preferred; however, candidates with a diploma or OSCP+ certificate equivalent experience will be considered.
• Experience in penetration testing, source code review, and host security assessments.
• Strong technical expertise in security testing methodologies, tools, and frameworks such as Metasploit, Kali Linux, Burp Suite, and Tenable Nessus.
• Proficiency in scripting languages (e.g., Python, Bash, or PowerShell) for security automation and testing.
• Solid understanding of web application technologies, network security principles, and the OSI model (including HTTP, DNS, SSH, FTP, etc.).
• Familiarity with established security testing methodologies, including the OWASP Web
• Security Testing Guide (OWSTG) and the Penetration Testing Execution Standard (PTES).
• Relevant industry certifications (e.g., OSCP, CREST CRT) are highly advantageous.

We are driven by our AEIOU beliefs—Adventure, Excellence, Integrity, Ownership, and Unity—and we seek individuals who embody these values in both their professional and personal lives. We are committed to our Impact: Valuing our clients, Growing our people, and Creating our future.

Together, we make the extraordinary happen.

Learn more about us at ncs.co and visit our LinkedIn career site.

We are driven by our AEIOU beliefs—Adventure, Excellence, Integrity, Ownership, and Unity—and we seek individuals who embody these values in both their professional and personal lives. We are committed to our Impact: Valuing our clients, Growing our people, and Creating our future.

Together, we make the extraordinary happen.

Learn more about us at ncs.co and visit our LinkedIn career site.