Information Security

Helius Technologies Pte Ltd; Singapore; On-site; SGD 90,000 - 150,000; Full time

Job summary

Helius Technologies Pte Ltd is seeking an Information Security Engineer with hands-on experience in vulnerability management and penetration testing. You will identify, prioritize, and track security vulnerabilities while coordinating testing across enterprise environments.

Responsibilities include managing the vulnerability lifecycle, coordinating testing across web apps, APIs, networks, and cloud, reviewing findings with technical teams, and producing security dashboards for stakeholders.

Qualifications

• 5–8 years of experience in Information Security, Vulnerability Management, or Penetration Testing.
• Hands-on experience with vulnerability management tools such as Qualys, Tenable, Rapid7, or similar.
• Good understanding of penetration testing methodologies and security frameworks such as OWASP, MITRE ATT&CK, PTES, or NIST.
• Exposure to penetration testing tools such as Burp Suite, Nmap, Metasploit, or Kali Linux.
• Understanding of SIEM/log management platforms is an advantage.
• Knowledge of cloud security and security best practices is preferred.
• Experience with in languages such as Python or PowerShell is an advantage.
• Strong analytical, communication, and stakeholder management skills.

Responsibilities

• Manage the end-to-end vulnerability management lifecycle, including identification, assessment, prioritization, remediation tracking, and validation.
• Coordinate and support penetration testing activities across web applications, APIs, networks, cloud, and infrastructure.
• Review vulnerability and penetration testing findings and work with technical teams to drive remediation.
• Perform risk-based analysis to prioritize vulnerabilities based on business impact.
• Monitor remediation progress and ensure timely closure of security findings.
• Prepare security reports, dashboards, and metrics for stakeholders.
• Collaborate with infrastructure, cloud, application, and security teams to improve the organization's security posture.
• Support security governance, compliance, and continuous process improvements.

Skills

Analytical skills

Communication

Stakeholder management

Hands-on security

Vulnerability management

Education

Bachelor's degree in Computer Science / Information Technology

Security certifications such as CEH, CISSP, CISM, OSCP, GPEN

Tools

Qualys

Tenable

Rapid7

Burp Suite

Nmap

Metasploit

Kali Linux

Job description

We are hiring an Information Security Engineer with experience in Vulnerability Management and Penetration Testing. The ideal candidate should have hands‑on experience in identifying, assessing, prioritizing, and tracking security vulnerabilities, along with coordinating or performing penetration testing across enterprise environments.

Key Responsibilities

• Manage the end-to-end vulnerability management lifecycle, including identification, assessment, prioritization, remediation tracking, and validation.
• Coordinate and support penetration testing activities across web applications, APIs, networks, cloud, and infrastructure.
• Review vulnerability and penetration testing findings and work with technical teams to drive remediation.
• Perform risk‑based analysis to prioritize vulnerabilities based on business impact.
• Monitor remediation progress and ensure timely closure of security findings.
• Prepare security reports, dashboards, and metrics for stakeholders.
• Collaborate with infrastructure, cloud, application, and security teams to improve the organization's security posture.
• Support security governance, compliance, and continuous process improvements.

Required Skills

• 5–8 years of experience in Information Security, Vulnerability Management, or Penetration Testing.
• Hands‑on experience with vulnerability management tools such as Qualys, Tenable, Rapid7, or similar.
• Good understanding of penetration testing methodologies and security frameworks such as OWASP, MITRE ATT&CK, PTES, or NIST.
• Exposure to penetration testing tools such as Burp Suite, Nmap, Metasploit, or Kali Linux.
• Understanding of SIEM/log management platforms is an advantage.
• Knowledge of cloud security and security best practices is preferred.
• Experience with ing languages such as Python or PowerShell is an advantage.
• Strong analytical, communication, and stakeholder management skills.

Preferred

• Bachelor's degree in Computer Science, Information Technology, or related field.
• Security certifications such as CEH, CISSP, CISM, OSCP, GPEN, or equivalent are preferred.