Cybersecurity Operations Specialist (Security Services) (JD#11350)

Sciente International Pte Ltd; Singapore; On-site; SGD 120,000 - 180,000; Full time

Job summary

Sciente International Pte Ltd is seeking a Cybersecurity Specialist to lead security testing governance, penetration testing, application security, and secure-by-design initiatives across enterprise environments. The role drives VAPT standards, red teaming, DevSecOps integration, source code security reviews, and stakeholder engagement to strengthen overall cyber resilience across the organization.

The ideal candidate has 8 years of hands-on cybersecurity experience with deep offensive security

Qualifications

• Must have 8 years hands-on cybersecurity experience and strong offensive security depth.
• Expertise in penetration testing across web apps, on-prem and cloud, and complex networks.
• Deep knowledge of SSDLC and common programming languages (e.g. Java, Python, .NET, JavaScript).

Responsibilities

• Define and maintain security testing frameworks and SOPs for VAPT across subsidiaries.
• Lead Red Team exercises and deep-dive penetration tests to uncover vulnerabilities.
• Drive Secure-by-Design practices and integrate security into DevOps pipelines (DevSecOps).
• Oversee source code analysis (SAST, SCA) and improve code quality and vulnerability detection.
• Monitor emerging threats and update testing standards; advise senior stakeholders.

Skills

Offensive security

Application security

Penetration testing

Source code review

SSDLC knowledge

Cloud & DevOps CI/CD

Communication skills

Education

Degree in Computer Science, Information Systems, Engineering

Tools

SAST

DAST

SCA

VAPT

MITRE ATT&CK

Job description

Job Summary

Looking for a Cybersecurity Specialist to lead security testing governance, penetration testing, application security, and secure-by-design initiatives across enterprise environments. The role drives VAPT standards, red teaming, DevSecOps integration, source code security reviews, and stakeholder engagement to strengthen overall cyber resilience.

Mandatory Skill-set

• Degree in Computer Science, Information Systems, Engineering;
• Must have 8 years of hands-on cybersecurity experience, with strong depth in offensive security and application security;
• Proven expertise in penetration testing across web applications, on-prem and cloud systems, and complex networks;
• Strong capability in manual and automated source code review to identify logic, injection, and cryptographic flaws;
• Experience in identifying patterns in testing gaps or recurring code vulnerabilities and providing actionable feedback;
• Deep understanding of secure software development lifecycle (SSDLC) and common programming languages (e.g. Java, Python, .NET, JavaScript);
• Proficiency with enterprise security tools (SAST, DAST, SCA, VAPT) and adversary frameworks such as MITRE ATT&CK;
• Experience in cloud and DevOps environments, including CI/CD pipelines;
• Excellent verbal and written communication and presentation skills.

Desired Skill-set

• Professional cybersecurity certifications such as OSCP, OSWE, CASE, GWEB, or equivalent are highly preferred.

Responsibilities

• Define and maintain organization-wide frameworks and SOPs for security testing (VAPT) to ensure consistency and quality across subsidiaries;
• Lead advanced technical operations, including Red Team exercises, deep-dive penetration tests, and adversary simulations to uncover critical vulnerabilities;
• Establish and promote secure coding standards, driving Secure-by-Design practices and integrating security into DevOps pipelines (DevSecOps);
• Oversee source code analysis (SAST, SCA) and recommend tools to improve code quality, resilience, and vulnerability detection;
• Monitor emerging threats and technology trends to continuously update testing standards and security practices;
• Act as a trusted advisor to senior stakeholders, and project teams, fostering a culture of security and knowledge sharing across the organizations.

EA Licence No. 07C5639