Offensive Security Consultant - Penetration Testing

Menrva Group; Singapore; On-site; SGD 80,000 - 120,000; Full time

Job summary

Menrva Group is expanding its Offensive Security practice and seeks hands‑on Red Team and Penetration Testing professionals. You will identify security risks, perform testing, and provide practical remediation guidance while leading or supporting engagements for diverse environments.

Role focuses on growing technical depth, collaborating with technical teams, and mentoring junior consultants. Strong English communication and OSCP/CREST CRT are required for client engagements.

Qualifications

• 2–3 years of consulting experience in cybersecurity or offensive security.
• Required: OSCP or CREST CRT.
• Experience presenting to stakeholders or executives is an advantage.
• Strong spoken English for client engagements.

Responsibilities

• Lead or manage security engagements as an Engagement Manager or Engagement Lead.
• Conduct penetration testing across applications, networks, cloud, and modern enterprise environments.
• Perform manual web application testing, API testing, and source code reviews.
• Assess hardening controls across cloud, endpoint, IoT, and other systems.
• Provide clear, actionable remediation guidance to clients.
• Mentor junior consultants and support capability development.
• Coordinate with clients and subject matter experts to deliver high‑quality outcomes.
• Contribute to secure architecture design, including cloud‑native environments.

Skills

Penetration testing

Vulnerability remediation

Client-facing communication

Threat modeling

Offensive security frameworks

Education

OSCP

CREST CRT

Job description

Our client is expanding their Offensive Security practice and seeking Red Team and Penetration Testing professionals who enjoy hands‑on technical work, client interaction, and solving complex cybersecurity challenges. This role suits consultants who want to grow their technical depth while contributing to high‑impact security engagements across diverse environments.

Role Overview

As an Offensive Security Consultant, you will work with organisations to identify security risks, perform penetration testing, and provide practical remediation guidance. You will lead or support engagements, collaborate with technical teams, and help develop offensive capabilities within the practice.

Key Responsibilities

1. Lead or manage security engagements as an Engagement Manager or Engagement Lead.
2. Conduct penetration testing across applications, networks, cloud, and modern enterprise environments.
3. Perform manual web application testing, API testing, and source code reviews.
4. Assess hardening controls across cloud, endpoint, IoT, and other systems.
5. Provide clear, actionable remediation guidance to clients.
6. Mentor junior consultants and support capability development.
7. Coordinate with clients and subject matter experts to deliver high‑quality outcomes.
8. Contribute to secure architecture design, including cloud‑native environments.

What You Bring

Candidates should have experience in several of the following areas:

1. Strong understanding of penetration testing methodologies, exploitation techniques, and vulnerability remediation aswell
2. Ability to identify issues in web applications, APIs, and source code.
3. Familiarity with threats across cloud platforms, endpoints, IoT, and enterprise environments.
4. Ability to adapt quickly to new technologies and evolving attack techniques.
5. Strong communication skills and confidence in client‑facing situations.

Experience & Certifications

1. 2–3 years of consulting experience in cybersecurity or offensive security.
2. Required: OSCP or CREST CRT.
3. Experience presenting to stakeholders or executives is an advantage.
4. Strong spoken English for client engagements.