Cyber Security Consultant (VAPT) - OSCP and CREST required

TESCOM (SINGAPORE) SOFTWARE SYSTEMS TESTING PTE LTD.; Singapore; On-site; SGD 70,000 - 110,000; Full time

Job summary

TESCOM (SINGAPORE) SOFTWARE SYSTEMS TESTING PTE LTD. is seeking a highly driven Cyber Security Consultant in Singapore.

You will participate in engagements focusing on networks, servers, applications, APIs, and mobile devices, using red teaming and diverse techniques to stay ahead of adversaries. The role requires 3–5 years of security experience, hands-on vulnerability assessment and penetration testing, and relevant CREST/OSCP certifications.

Qualifications

• Bachelor's degree or equivalent work experience required.
• 3–5 years security experience in a security analyst, engineer, architect, consultant, or similar role.
• 3+ years' professional experience in vulnerability assessment and penetration testing.
• Certifications: CREST CRT, CREST Practitioner Security Analyst, OSCP.

Responsibilities

• Support security sales meetings and provide effort estimation / timelines.
• Develop the security acceptance test plan.
• Provide expert technical support during testing activities.
• Set up testing environment and configure security testing tools.
• Perform manual or automated security testing.
• Conduct Greybox Testing (Authenticated) and Blackbox Testing (Unauthenticated) Penetration Tests on network.
• Conduct Whitebox Testing and Secure Code Review.
• Network and Infrastructure Vulnerability Assessment and Penetration Testing.
• Web, Mobile and Desktop Application Vulnerability Assessment and Penetration Testing.
• Find and document vulnerabilities; provide mitigation recommendations.
• Present security testing results to stakeholders; provide weekly status reports.

Skills

Security testing

Penetration testing

Vulnerability assessment

Network security

Whitebox testing

Education

Bachelor's degree in computer science or information systems

Tools

Burp Suite

Nessus

Nmap

Metasploit

Sona Cube

Job description

We are looking for a highly driven and self-motivated Cyber Security Consultant to join our team! As a member at our company, you will have the opportunity to work on new and exciting projects and develop your career.

JOB SUMMARY

You will participate in a variety of engagements, focusing on targets that may include network equipment, servers, applications, APIs, wireless infrastructures, mobile devices, and other information systems. Using a variety of tools and techniques that may include red teaming, you will have the opportunity to combine technical expertise with your imagination to discover innovative methods with the goal of ensuring customers remain one step ahead of its adversaries.

Hands on Responsibilities:

• Support the sales by attending security sales meeting (if necessary), effort estimation and provide security testing project timeline
• Develop the security acceptance test plan
• Provide expert technical support during the security testing activities
• Security test preparation, setting-up of testing environment, configuration and installation of the security testing tools
• Perform manual or automated security testing using commercial security testing tools
• Conduct Greybox Testing (Authenticated) and/or Blackbox Testing (Unauthenticated) Penetration Tests on network
• Conduct Whitebox Testing and Secure Code Review
• Conduct Network and Infrastructure Vulnerability Assessment and Penetration Testing
• Conduct Web, Mobile and Desktop Application Vulnerability Assessment and Penetration Testing
• Find and pinpoint the vulnerabilities of the assess target system / application
• Document and Report the vulnerabilities found in the system
• Provide professional recommendations / advice to mitigate and resolve the vulnerabilities
• Present the security testing results to the relevant stakeholders
• Provide weekly status reporting on the security testing activity progress

Requirements:

• Bachelor's degree, preferably in computer science or information systems, or equivalent work experience
• Minimum 3 - 5 years security experience in a security analyst, engineer, architect, consultant, or a similar role
• Minimum 3 years’ professional experience in conducting vulnerability assessment and penetration testing
• Required Certifications: Any of the followings:

1. CREST Registered Penetration Tester (CREST CRT)
2. CREST Practitioner Security Analyst
3. Offensive Security Certified Professional (OSCP)

• Knowledge in conducting security testing with the following guidelines and standards
• Experience in configering and setting of Sona Cube offline.
• High proficiency in manual and automated techniques for penetration testing (network equipment, servers, web applications, APIs, wireless, mobile, databases, and other information systems), as well as executing vulnerability assessments (injection, privilege escalation, fuzzing, buffer overflows, etc.)
• Tools – Proxies, Port Scanners, Vulnerability Scanners, Exploit Frameworks (ex: Burp, Nessus, Nmap, Metasploit)
• Experience/Knowledge in Semgreb will be advantage