Cybersecurity Penetration Tester

CROWE HORWATH FIRST TRUST RISK ADVISORY PTE. LTD.; Singapore; On-site; SGD 48,000 - 80,000; Full time

Job summary

A leading advisory company in Singapore is seeking a Cybersecurity Penetration Tester to conduct regular IT audits and penetration testing for its clients. The successful candidate will have a strong background in IT systems, network security, and relevant certifications such as OSCP or CEH. Key responsibilities include vulnerability assessments and ensuring compliance with IT standards while collaborating with IT teams to enhance security measures.

Qualifications

• Bachelor’s degree in IT, Computer Science, or a related field.
• Professional certifications in OSCP, CEH, OSCE, CREST or equivalent.
• Proven experience as an IT auditor or similar role in a cybersecurity environment.

Responsibilities

• Conduct regular audits on client’s IT systems, ensuring compliance with standards.
• Perform Vulnerability Assessment and Penetration Testing (VAPT) across clients.
• Identify IT risks and controls, and suggest mitigation strategies.

Skills

Network security

Vulnerability Assessment and Penetration Testing

IT Audit

Communication skills

Education

Bachelor’s degree in IT or Computer Science

Job description

Job Roles and Responsibilities:

The Cybersecurity Penetration Tester will be responsible for conducting regular audits on our client’s IT systems, ensuring compliance with all relevant regulations and standards. The ideal candidate will have a strong understanding of IT systems, network security, and audit procedures. Job responsibilities include:

Vulnerability Assessment and Penetration Testing

• Perform Vulnerability Assessment and Penetration Testing (VAPT) to across multiple clients and industries to identify potential security vulnerabilities, in support of our client's security requirements to test and validate the effectiveness of their IT security posture.
• Supporting remote and onsite operations by employing simulated adversarial threat-based approaches to expose and exploit vulnerabilities to identify weaknesses and to improve the security posture and operational procedures
• Using various testing, social engineering, and penetration testing approaches for vulnerability identification, enumeration, and purposeful exploitation to determine the value and effectiveness of a network, system, or application's security configuration

IT Audit

• Evaluate the effectiveness of clients’ information-processing controls across industries, business process cycles and network platforms.
• Conduct regular IT audits to ensure compliance with all relevant standards and regulations.
• Identify and assess IT risks and controls, and suggest mitigation strategies.
• Assist in the development of IT audit scope and IT audit procedures.
• Evaluate the effectiveness of IT general controls and recommend improvements.
• Prepare and present reports that reflect audit results and document the proposed process.
• Engage in continuous knowledge development regarding sector’s rules, regulations, best practices, tools, techniques, and performance standards.
• Collaborate with IT staff and management to improve security and efficiency.
• Assist in conducting internal audits and providing necessary certifications.
• Perform other ad-hoc duties as assigned.

Job Requirement:

• Bachelor’s degree in IT, Computer Science, or a related field.
• Professional certifications in OSCP (Offensive Security Certified Professional), CEH (Certified Ethical Hacker), OSCE (Offensive Security Certified Expert), CREST or equivalent
• Other professional certifications such as CISA, CISSP, or CISM are preferred.
• Proven experience as an IT auditor or similar role in a cybersecurity environment.
• Strong knowledge and understanding of IT systems, network security, and VAPT, including IT standards and frameworks (e.g., COBIT, NIST, ISO 27001), IT audit methodologies, techniques, and tools.
• Excellent communication skills in both oral and written English.
• Able to appreciate business process issues and understand business transaction scenarios, and how an application system can support them.
• Resourceful and able to work out technical solutions.
• Logical thinking, good attitude, fast learner, and good team player.
• Able to handle multiple tasks and assignments.
• Able to work under pressure and meet deadlines.