Lead Consultant (OSCP, CREST CRT Cert Required)

NCS; Singapore; On-site; SGD 120,000 - 180,000; Full time

Job summary

NCS, a leading AI tech services company and Singtel Group subsidiary, seeks an experienced Lead Consultant in Singapore to deliver expert IT security consultancy across networks, apps, and IoT devices.

You will spearhead security assessments, guide project teams, and present findings to diverse stakeholders, driving secure outcomes and continuous improvement.

Qualifications

• Experience in penetration testing, source code review, and host security assessments.
• Experience in leading and coaching a team.
• Proficient with security testing methodologies, tools, and frameworks (Metasploit, Kali Linux, Burp Suite, Nessus).
• Scripting skills in Python, Bash, or PowerShell for security automation.
• Strong understanding of web technologies, network security, and OSI model.
• Familiar with OWASP WSTG and PTES testing standards.
• Certifications such as OSCP or CREST CRT required.
• Strong interpersonal and communication skills.
• Degree in cybersecurity or computer science preferred; diploma acceptable.
• Eager for continuous learning and growth.

Responsibilities

• Conduct technical security assessments, including penetration testing, source code review, and security configuration analysis.
• Utilize industry-recognized processes and tools to identify vulnerabilities, aligning with security objectives.
• Work with clients and internal teams to deliver security solutions and recommendations.
• Perform compliance audits and system reviews against industry best practices and policies.
• Articulate security findings through detailed reports and presentations for technical and non-technical stakeholders.
• Provide leadership, guidance, and performance management for project team members.
• Conduct team reviews and foster continuous improvement through coaching and collaboration.
• Promote teamwork, ownership, and communication within project teams.

Skills

Penetration testing

Team leadership

Security testing methodologies

Python

Bash

PowerShell

Web technologies

Networking fundamentals

OWASP WSTG

PTES

Communication

Willingness to learn

Education

Bachelor's degree in cybersecurity or computer science

Tools

Metasploit

Kali Linux

Burp Suite

Tenable Nessus

Job description

• Full-time
• Department: Others

Company Description

NCS is a leading AI Tech Services company. With a 15,000-strong team across the Asia Pacific, NCS scales its platforms and capabilities to provide clients with greater agility and AI expertise across a range of Industries. Embracing a strong ecosystem of global partners, NCS transforms technology services delivery combining AI with digital resilience to drive real business impact. NCS is a subsidiary of the Singtel Group.

Job Description

A Lead Consultant provides expert IT security consultancy and advisory services, helping to secure cyber assets, including networks, mobile applications, web applications, and IoT devices. The role involves security system configuration, source code review, and penetration testing.

Duties & Responsibilities

• Conduct technical security assessments, including penetration testing, source code review, and security configuration analysis.
• Utilize industry-recognized processes and tools to identify and assess security vulnerabilities, aligning with strategic, tactical, and operational security objectives.
• Work closely with clients and internal teams to deliver effective security solutions and recommendations.
• Perform compliance audits and system reviews against industry best practices, security policies, and procedural guidelines.
• Clearly articulate security findings through detailed reports and presentations, tailored for both technical and non-technical stakeholders.
• Provide leadership, guidance, and performance management for project team members
• Conduct team reviews and foster continuous improvement through coaching and collaboration
• Promote teamwork, ownership, and communication within project teams

Qualifications

• Experience in penetration testing, source code review, and host security assessments.
• Experience in leading and coaching a team
• Strong technical expertise in security testing methodologies, tools, and frameworks such as Metasploit, Kali Linux, Burp Suite, and Tenable Nessus.
• Proficiency in scripting languages (e.g., Python, Bash, or PowerShell) for security automation and testing.
• Solid understanding of web application technologies, network security principles, and the OSI model (including HTTP, DNS, SSH, FTP, etc.).
• Familiarity with established security testing methodologies, including the OWASP Web Security Testing Guide (OWSTG) and the Penetration Testing Execution Standard (PTES).
• Relevant industry certifications (e.g., OSCP, CREST CRT) is required
• Strong interpersonal and communication skills
• A degree in cybersecurity, computer science, or a related field is preferred; however, candidates with a diploma or equivalent experience will be considered.
• Enthusiastic about continuous learning and professional growth in the cybersecurity field.

Additional Information

We are driven by our AEIOU beliefs—Adventure, Excellence, Integrity, Ownership, and Unity—and we seek individuals who embody these values in both their professional and personal lives. We are committed to our Impact: Valuing our clients, Growing our people, and Creating our future.

Together, we make the extraordinary happen.

Learn more about us at ncs.co and visit our LinkedIn career site.

Scam Alert

We are aware of fraudulent job offers and impersonations of NCS recruiters. Phishing emails using convincing-looking but fake addresses are also commonly used to trick you into thinking that they come from official NCS sources.

Please note that all official communications from NCS Group will only be sent from verified corporate email addresses. Always check that the sender’s email address ends with the genuine NCS domain, @ncs.com.sg and beware of extra letters, symbols or misspellings. When in doubt, verify the sender’s identity by contacting us at [e-mail].

By clicking the link above or any third-party link within this posting, you are leaving this site and going to a third-party website where the third-party website's terms and privacy policy apply