Offensive Security Consultant / Red Team Specialist

MENRVA PTE. LTD.; Singapore; On-site; SGD 110,000 - 170,000; Full time

Job summary

MENRVA PTE. LTD. is seeking an experienced Offensive Security Consultant to lead security engagements across web, cloud, endpoint and IoT environments.

You will perform hands-on testing, code review, and translate findings into practical guidance for clients. The role combines practical penetration testing with engagement leadership, mentoring junior consultants, and developing specialist capabilities in secure cloud architecture.

Qualifications

• 2–3 years of client-facing security consulting experience.
• OSCP or CREST CRT certification required.
• Strong pen-testing methodologies and remediation knowledge.
• Experience assessing web apps/APIs and reviewing source code.
• Comfortable engaging with senior/executive-level stakeholders.
• Professional working proficiency in English.

Responsibilities

• Own security engagements from scoping through delivery, working directly with client stakeholders
• Uncover vulnerabilities through manual code review, static analysis and adversarial/penetration testing
• Evaluate hardening and security controls across cloud, endpoint and connected-device (IoT) environments
• Coach and develop junior consultants on live engagements
• Contribute to building out a specialist capability area (e.g. secure cloud architecture)

Skills

Client-facing

Penetration testing

Code review

Cloud security

Stakeholder engagement

English proficiency

Education

OSCP

CREST CRT

Job description

We are working with a fast-growing cybersecurity firm helping ambitious organisations build resilience against real-world threats. They are looking for an experienced Offensive Security Consultant to join their team on a contract, with an urgent start date.

You will operate as both a hands-on practitioner and Engagement Lead — running security assessments across web, cloud, endpoint and IoT environments, digging into code to surface risk, and translating technical findings into practical guidance clients can act on. You will also support junior team members and help build out specialist technical capability within the team.

Key Responsibilities:

• Own security engagements from scoping through delivery, working directly with client stakeholders
• Uncover vulnerabilities through manual code review, static analysis and adversarial/penetration testing
• Evaluate hardening and security controls across cloud, endpoint and connected-device (IoT) environments
• Coach and develop junior consultants on live engagements
• Contribute to building out a specialist capability area (e.g. secure cloud architecture)

Requirements:

• 2–3 years of client-facing security consulting experience
• OSCP or CREST CRT certification (essential)
• Strong understanding of penetration-testing methodologies and remediation practices
• Experience identifying vulnerabilities in web applications/APIs and reviewing source code
• Comfortable engaging with senior/executive-level stakeholders
• Professional working proficiency in English