Cybersecurity Pentester

BDO ADVISORY PTE. LTD.; Singapore; On-site; SGD 90,000 - 120,000; Full time

Job summary

BDO ADVISORY PTE. LTD. in Singapore seeks a Cybersecurity Pentester/Senior Pentester to support our growing Cybersecurity Consulting practice.

You will help plan and execute IT/OT security assessments and red/purple teaming engagements for a expanding client portfolio. You will work with Seniors and Consultants on remote/on-site engagements, conduct blackbox/greybox/whitebox testing as needed, manage client expectations, and contribute to high-quality reports and audit readiness in a fast-paced

Qualifications

• Bachelor's degree in IT, computing or related field.
• 1–2 years of information security or testing experience preferred.
• Experience with OWASP Top 10, OSSTMM, MITRE ATT&CK.
• Working knowledge of Windows OS, Linux, AWS, GCP, Azure, SQL Server.
• Familiarity with security tools such as Cobalt Strike, Kali Linux, Burp Suite.
• Strong communication and time-management skills.
• Team player with innovative mindset; pursuing CREST CRT, OSEP, OSCE/3, OSWE, OSED, OSWP or similar.

Responsibilities

• Support Seniors and Consultants with remote / onsite assessments, such as red teaming and/or purple teaming operations, web /mobile application penetration tests, vulnerability assessments, launch phishing campaigns and configuration review engagements
• Ability to minimally conduct blackbox and greybox tests and eventually whitebox testing
• Basic project management and manage client relationships on expectations with effective communication
• Coordinate day-to-day operations with Seniors, Consultants and clients (i.e. schedule and lead meetings; create agendas; develop document request lists; document walkthrough narratives, control designs and tests of operating effectiveness)
• Conduct peer-reviews of the projects in-scope
• Assist Senior Consultants with the preparation and review of draft reports
• Assist with audit quality and assurance procedures
• Utilise base knowledge of information security systems, risks and controls
• Perform other administrative duties and assist with internal initiatives as assigned

Skills

OWASP Top 10

OSSTMM

MITRE ATT&CK

Windows OS

Linux

AWS

GCP

Azure

SQL Server

Cobalt Strike

Kali Linux

Burpsuite

Slack

Discord

Communication skills

Time management

Team player

Education

Bachelor’s degree in IT / computing / forensics / related field

Tools

Burp Suite

Cobalt Strike

Kali Linux

Job description

Job Description

We are seeking a Cybersecurity Pentester/ Senior Pentester to support our Cybersecurity Consulting practice. This position assists Consultants in planning and executing IT / OT security assessment engagements and red / purple teaming operations for our rapidly expanding client portfolio.

Responsibilities

• Support Seniors and Consultants with remote / onsite assessments, such as red teaming and/or purple teaming operations, web /mobile application penetration tests, vulnerability assessments, launch phishing campaigns and configuration review engagements
• Ability to minimally conduct blackbox and greybox tests and eventually whitebox testing
• Basic project management and manage client relationships on expectations with effective communication
• Coordinate day-to-day operations with Seniors, Consultants and clients (i.e. schedule and lead meetings; create agendas; develop document request lists; document walkthrough narratives, control designs and tests of operating effectiveness)
• Conduct peer-reviews of the projects in-scope
• Assist Senior Consultants with the preparation and review of draft reports
• Assist with audit quality and assurance procedures
• Utilise base knowledge of information security systems, risks and controls
• Perform other administrative duties and assist with internal initiatives as assigned

Qualifications

• Bachelor’s degree from an accredited university in IT, computing/forensics, accounting, data analytics or a related field
• One to two (1-2) years of experience in information security, IT security testing or a related field preferred
• Focused experience with OWASP Top 10, OSSTMM, MITRE ATT&CK Framework preferred
• Ideally, working knowledge and technical experience with Windows OS, Linux, AWS, GCP, Azure, and SQL Server.
• Understanding of TCP/IP, common networking ports and protocols, traffic flow, system administration, OSI model, defense-in-depth and common security elements
• Familiarity with tools, such as Cobalt Strike, Kali Linux, Burpsuite, Slack, Discord
• Excellent interpersonal, written and verbal communication skills
• Exemplary time-management skills with the ability to juggle multiple projects and priorities
• Self-starter with a solution-oriented mindset and the ability to thrive in a fast-paced environment, at times with well-defined goals, but limited formal procedures/structure
• Must be a team player, passionate about the security testing, and have an innovative mindset
• Working toward or already have certifications, such as CREST CRT, OSEP, OSCE/3, OSWE, OSED, OSWP, OSCP and others related to information security testing and red teaming operations.