Cybersecurity Consultant

STONE CYBERSECURITY PTE. LTD.; Singapore; Hybrid; SGD 70,000 - 90,000; Full time

Job summary

A cybersecurity company in Singapore is seeking a strategic Cybersecurity Consultant. You will conduct penetration testing and vulnerability assessments, simulating attack scenarios, and providing actionable insights. The ideal candidate has professional certifications, over 2 years of experience in VAPT, and strong report writing skills. The role offers a competitive salary, hybrid working model, and generous benefits.

Benefits

Competitive salary

Hybrid working model

20 days annual leave

Medical coverage

Dental coverage

Certification sponsorships

Qualifications

• 2+ years of hands-on experience in VAPT engagements.
• Ability to explain complex vulnerabilities to technical and non-technical audiences.
• Experience in Red Teaming or secure code review is a plus.

Responsibilities

• Conduct in-depth penetration testing and vulnerability assessments.
• Simulate real-world attack scenarios to identify vulnerabilities.
• Prepare detailed technical reports with remediation recommendations.
• Participate in client debrief sessions to communicate findings.

Skills

Penetration testing

Vulnerability assessments

Report writing

Communication skills

Team player

Education

OSCP certification

CREST CRT or equivalent

Tools

Burp Suite

Nmap

Metasploit

Job description

We are looking for a strategic and detail-oriented Cybersecurity Consultant to join our growing team. If you’re passionate about offensive security and thrive on uncovering vulnerabilities before attackers do, we want to hear from you.

As a Cybersecurity Consultant specializing in Vulnerability Assessment and Penetration Testing (VAPT), you will work closely with clients to evaluate the security of their infrastructure, applications, and environments—delivering clear, actionable insights to strengthen their cyber posture.

Key Responsibilities

• Conduct in-depth penetration testing and vulnerability assessments for web apps, mobile apps, APIs, infrastructure, and cloud environments.
• Simulate real-world attack scenarios and identify exploitable vulnerabilities using manual and automated methods.
• Prepare detailed and client-friendly technical reports with prioritised risk remediation recommendations.
• Participate in client debrief sessions to communicate findings, answer technical queries, and advise on security hardening.
• Continuously update your skillset and toolset based on emerging threats and vulnerabilities.
• Assist in refining internal testing methodologies and contributing to knowledge-sharing sessions.

Requirements

• Professional certifications: OSCP is required; CREST CRT (or equivalent) is highly preferred.
• 2+ years of hands-on experience in VAPT engagements (web, infra, mobile, APIs).
• Strong working knowledge of common security testing tools (e.g., Burp Suite, Nmap, Metasploit, etc.).
• Ability to explain complex vulnerabilities and exploit scenarios to both technical and non-technical audiences.
• Excellent report writing and communication skills in English.
• Team player with the ability to also work independently on assignments.
• Bonus: Experience with Red Teaming, threat modelling, or secure code review is a plus.

What We Offer

• Competitive salary and performance-based incentives
• Hybrid working model (work from home and office flexibility)
• Generous leave and wellness benefits:
  • 20 days annual leave
  • Medical (Inpatient & Outpatient)
  • Dental coverage
  • Flexi-benefits scheme
• Support for professional development: training budgets, certification sponsorships
• Collaborative and inclusive culture with exposure to high-profile clients and engagements

Why Join Us?

You’ll be part of a CREST-accredited cybersecurity company with a strong reputation in Singapore and the region. We value innovation, continuous learning, and teamwork. If you’re looking to grow your career in offensive security and be part of a passionate and capable team — this is your opportunity.