Offensive Security Consultant

REVUP PROSERVICES PTE. LTD.; Singapore; On-site; SGD 70,000 - 90,000; Full time

Job summary

A cybersecurity firm in Singapore is seeking an Offensive Security Consultant. The role involves executing penetration tests, conducting vulnerability assessments, and developing security plans. Ideal candidates should have 3-5 years of relevant experience and certifications like CREST CRT, CREST Practitioner Security Analyst, and OSCP. Strong skills in manual and automated testing, as well as the ability to communicate findings effectively, are essential.

Qualifications

• 3–5 years of security experience in a relevant role.
• At least 3 years conducting vulnerability assessments and penetration testing.
• Required certifications: CREST CRT, CREST Practitioner Security Analyst, OSCP.

Responsibilities

• Support sales through meetings and efforts estimations.
• Develop security acceptance test plans.
• Execute manual and automated security testing.

Skills

Vulnerability assessments

Penetration testing

Manual testing

Automated testing

Security tools configuration

Reporting findings

Stakeholder communication

Education

Bachelor’s degree in Computer Science or Information Systems

Tools

Burp Suite

Nessus

Nmap

Metasploit

SonarQube

Job description

Offensive Security Consultant

• Permanent role
• Work location: CBD area

The Opportunity

• Support sales as needed: attend meetings, estimate effort, provide timelines.
• Develop security acceptance test plans.
• Provide technical support during testing activities.
• Prepare test environments: configure/install security tools.
• Execute manual and automated security testing using commercial tools.
• Perform Greybox (authenticated) and Blackbox (unauthenticated) penetration tests on networks.
• Conduct Whitebox testing and secure code reviews.
• Perform network & infrastructure vulnerability assessments and penetration tests.
• Perform web, mobile and desktop application vulnerability assessments and penetration tests.
• Identify and pinpoint vulnerabilities in target systems/applications.
• Document and report findings.
• Recommend mitigations and remediation steps.
• Present results to stakeholders.
• Provide weekly status reports on testing progress.

Your Background

• Bachelor’s degree (Computer Science / Information Systems) or equivalent experience.
• 3–5 years’ security experience (analyst/engineer/architect/consultant or similar).
• At least 3 years conducting vulnerability assessments and penetration testing.
• Required certification: CREST CRT, CREST Practitioner Security Analyst and OSCP.
• Familiarity with security testing guidelines and standards.
• Experience configuring and running SonarQube offline.
• Strong proficiency in manual and automated penetration testing across networks, servers, web apps, APIs, wireless, mobile, DBs, etc. (techniques: injection, privilege escalation, fuzzing, buffer overflows, etc.).
• Tool experience: proxies, port scanners, vulnerability scanners, exploit frameworks (e.g., Burp, Nessus, Nmap, Metasploit).
• Experience/knowledge of Semgrep is an advantage.
• Only Singaporeans

May Anne Ramos

Senior Consultant | R1110127

Revup Proservices Pte Ltd | EA.24C2366