Cybersecurity Technical Lead

STONE CYBERSECURITY PTE. LTD.; Singapore; On-site; SGD 80,000 - 120,000; Full time

Job summary

A leading cybersecurity firm in Singapore is seeking an experienced Cybersecurity Technical Lead to guide security testing engagements. The role requires strong expertise in cybersecurity testing across multiple disciplines, including application and infrastructure security. Applicants should possess at least 5–8 years of hands-on experience and relevant certifications such as OSCP. The firm offers competitive salary, performance-based incentives, and a culture of continuous learning and integrity.

Benefits

Competitive salary with incentives

20 days annual leave

Medical and Dental coverage

Training budgets and certification sponsorship

Qualifications

• 5–8+ years of hands-on cybersecurity testing experience, covering more than just VAPT.
• Proven experience leading or acting as technical authority on complex security assessments.
• Proficiency in various security testing disciplines including infrastructure, application, and cloud.

Responsibilities

• Lead and oversee a broad range of security testing engagements.
• Translate technical findings into business and operational risk.
• Mentor and upskill consultants across different testing disciplines.

Skills

Cybersecurity testing experience

Mentoring skills

Risk-based analysis

Technical leadership

Education

OSCP

CISSP

CISM

CREST CRT / CCT / CPSA

Job description

Job Description & Overview

We are looking for a highly experienced and well-rounded Cybersecurity Technical Lead to join our growing team. This role goes beyond traditional Vulnerability Assessment and Penetration Testing (VAPT) and requires strong technical depth across multiple security testing disciplines, including application security, infrastructure, cloud, and OT/ICS environments.

As a Cybersecurity Technical Lead, you will serve as the technical authority across security testing engagements, guiding teams, assuring quality, and advising clients on risk-based security improvements. You will work closely with stakeholders across commercial, government, and regulated sectors, delivering assessments that are technically rigorous, compliant, and actionable.

Key Responsibilities

Security Testing Leadership

• Lead and oversee a broad range of security testing engagements, including:
• Infrastructure VAPT (on-prem, cloud, hybrid)
• Web Application Penetration Testing (WAPT)
• Mobile Application & API Security Testing
• Secure Configuration Review / Security Configuration Testing (SCT)
• Static Application Security Testing (SAST) and coordination of DAST / IAST where applicable
• OT / ICS VAPT for industrial, IoT, and cyber-physical systems
• Design testing strategies that balance manual testing, automated scanning, and risk-based analysis.

Client Advisory & Engagement

• Lead client briefings, technical walkthroughs, and executive debrief sessions.
• Translate technical findings into business and operational risk.
• Advise on remediation, secure design, hardening, and long-term security improvement roadmaps.
• Support pre-sales and tender responses, including scope definition, effort estimation, and technical clarification.

Team Mentorship & Capability Building

• Mentor and upskill consultants across different testing disciplines.
• Review and approve junior team members’ test plans, methodologies, and reports.
• Build internal capability in advanced testing areas (e.g. SAST, OT security testing, cloud-native security).

Requirements

• 5–8+ years of hands‑on cybersecurity testing experience, covering more than just VAPT.
• Proven experience leading or acting as technical authority on complex security assessments.
• OSCP – required
• CREST CRT / CCT / CPSA – strongly preferred
• CISSP, CISM – strongly preferred
• GIAC (GICSP, GPEN, GWAPT, GXPN)

What We Offer

• Competitive salary with performance-based incentives
• 20 days annual leave
• Medical (Inpatient & Outpatient) & Dental coverage
• Flexi-benefits scheme
• Training budgets and certification sponsorship
• Exposure to enterprise, government, OT, and regulated sector projects
• A technically driven culture that values quality, integrity, and continuous learning

Why Join Us?

You will be joining a CREST‑accredited cybersecurity firm trusted by enterprises and public‑sector organisations across Singapore and the region. This role offers the opportunity to influence how security testing is delivered, expand into advanced domains such as OT and application security, and help build a high‑performing technical team.