Cybersecurity Consultant

STONE CYBERSECURITY PTE. LTD.; Singapore; Hybrid; SGD 80,000 - 100,000; Full time

Job summary

A leading cybersecurity firm in Singapore is seeking an experienced Cybersecurity Consultant specializing in Vulnerability Assessment and Penetration Testing (VAPT). This role involves conducting in-depth testing for various infrastructures and applications, preparing detailed technical reports, and advising clients on security enhancements. With 2+ years of hands-on experience and strong communication skills, candidates will thrive in a collaborative environment offering a hybrid working model and competitive remuneration. Join a CREST-accredited team dedicated to continuous learning and innovation.

Benefits

Competitive salary and performance-based incentives

Hybrid working model

Generous leave and wellness benefits

Support for professional development

Collaborative and inclusive culture

Qualifications

• 2+ years of hands-on experience in VAPT engagements (web, infra, mobile, APIs).
• Strong working knowledge of common security testing tools.
• Ability to explain complex vulnerabilities to technical and non-technical audiences.

Responsibilities

• Conduct in-depth penetration testing and vulnerability assessments for various environments.
• Simulate real-world attack scenarios to identify vulnerabilities.
• Prepare detailed technical reports with risk remediation recommendations.

Skills

Penetration testing

Vulnerability assessment

Communication skills

Teamwork

Education

Professional certifications: OSCP

CREST CRT (or equivalent)

Tools

Burp Suite

Nmap

Metasploit

Job description

We are looking for a strategic and detail-oriented Cybersecurity Consultant to join our growing team. If you’re passionate about offensive security and thrive on uncovering vulnerabilities before attackers do, we want to hear from you.

As a Cybersecurity Consultant specializing in Vulnerability Assessment and Penetration Testing (VAPT), you will work closely with clients to evaluate the security of their infrastructure, applications, and environments—delivering clear, actionable insights to strengthen their cyber posture.

Key Responsibilities

• Conduct in-depth penetration testing and vulnerability assessments for web apps, mobile apps, APIs, infrastructure, and cloud environments.
• Simulate real-world attack scenarios and identify exploitable vulnerabilities using manual and automated methods.
• Prepare detailed and client-friendly technical reports with prioritised risk remediation recommendations.
• Participate in client debrief sessions to communicate findings, answer technical queries, and advise on security hardening.
• Continuously update your skillset and toolset based on emerging threats and vulnerabilities.
• Assist in refining internal testing methodologies and contributing to knowledge-sharing sessions.

Requirements

• Professional certifications: OSCP is required; CREST CRT (or equivalent) is highly preferred.
• 2+ years of hands-on experience in VAPT engagements (web, infra, mobile, APIs).
• Strong working knowledge of common security testing tools (e.g., Burp Suite, Nmap, Metasploit, etc.).
• Ability to explain complex vulnerabilities and exploit scenarios to both technical and non-technical audiences.
• Excellent report writing and communication skills in English.
• Team player with the ability to also work independently on assignments.
• Bonus: Experience with Red Teaming, threat modelling, or secure code review is a plus.

What We Offer

• Competitive salary and performance-based incentives
• Hybrid working model (work from home and office flexibility)
• Generous leave and wellness benefits:
• 20 days annual leave
• Medical (Inpatient & Outpatient)
• Dental coverage
• Flexi-benefits scheme
• Support for professional development: training budgets, certification sponsorships
• Collaborative and inclusive culture with exposure to high-profile clients and engagements

Why Join Us?

You’ll be part of a CREST-accredited cybersecurity company with a strong reputation in Singapore and the region. We value innovation, continuous learning, and teamwork. If you’re looking to grow your career in offensive security and be part of a passionate and capable team — this is your opportunity.