VAPT Security Tester & Assurance Specialist (OSCP+)

NCS Pte Ltd; Hong Kong; On-site; HKD 360,000 - 720,000; Full time

Job summary

NCS Pte Ltd is seeking a skilled security professional to conduct technical security assessments across APAC clients. You will perform penetration testing, source code review, and security configuration analysis to identify risks and actionable improvements.

Work closely with clients and internal teams to deliver effective security solutions, audits, and clear findings for both technical and non-technical stakeholders. Strong tooling and methodology expertise required.

Qualifications

• Degree in cybersecurity or related field preferred; diploma or OSCP+ considered.
• Experience in penetration testing, code review, and host security assessments.
• Strong expertise in security testing tools and frameworks (Metasploit, Kali, Burp, Nessus).
• Scripting skills (Python, Bash, PowerShell) for automation.
• Understanding of web apps, networks, and the OSI model.
• Familiarity with OWASP Web Security Testing Guide (OWSTG) and PTES.
• Certifications such as OSCP or CREST CRT are advantageous.

Responsibilities

• Conduct technical security assessments, including penetration testing, code review, and configuration analysis.
• Identify and assess vulnerabilities using standard security processes and tools.
• Collaborate with clients and internal teams to deliver effective security solutions and recommendations.
• Perform compliance audits and system reviews against best practices and security policies.
• Present security findings through detailed reports for technical and non-technical stakeholders.

Skills

Penetration testing

Code review

Security testing

Scripting: Python

Kali Linux

Burp Suite

Metasploit

Nessus

Education

Bachelor's degree in cybersecurity or related field

Diploma or OSCP+ certificate equivalent

OSCP/CREST CRT advantageous

Tools

Metasploit

Burp Suite

Kali Linux

OWASP ZAP

Nessus/Tenables Nessus

Job description

NCS Pte Ltd is seeking a skilled security professional to conduct technical security assessments across APAC clients. You will perform penetration testing, source code review, and security configuration analysis to identify risks and actionable improvements.

Work closely with clients and internal teams to deliver effective security solutions, audits, and clear findings for both technical and non-technical stakeholders. Strong tooling and methodology expertise required.