Penetration Tester (CAT1 or 2A clearance)

Sekuro Asia - An Insight Company; Singapore; On-site; SGD 90,000 - 130,000; Full time

Job summary

Sekuro Asia is seeking experienced Offensive Security Analysts to join our Red Team. You will deliver practical security assessments across web, cloud, and network environments for diverse clients.

Lead engagements, guide junior consultants, develop security test plans, and coordinate with clients and SMEs. OSCP or CREST CRT is required; English fluency is essential.

Qualifications

• 2–3 years of client-facing consulting experience.
• Must have: OSCP or CREST CRT.
• Preferred: CAT 1 or 2A government project clearance.
• Must be able to speak English for English-speaking clients.

Responsibilities

• Acting as an Engagement Manager or Engagement Lead on projects, as an individual contributor.
• Conducting security assessments for various technology types and environments, with a focus on penetration testing.
• Guiding junior talent to become cybersecurity experts as well.
• Doing project management and developing security test plans around larger complex projects.
• Coordinate with clients and other subject matter experts in different fields, as required in projects.
• Drive and develop capabilities in specific security areas, e.g. secure system architecture design in the cloud.

Skills

Penetration testing

Code review

Threat modeling

Cloud security

Client engagement

Education

OSCP or CREST CRT

Job description

*** We do not sponsor any working visas****

About the job

The Role:

Our Red Team, Offensive Security Analysts and Consultants work with organisations and technical teams to perform a variety of assessments and provide practical advice to keep them secure. Red team members are generally familiar with and apply themselves to most aspects of cybersecurity but specialize in web application security, code reviews, architecture design, network security, attack simulations or even specialist fields such as mainframe or SCADA systems. They help to ensure cybersecurity issues and identified along with their associated risks, and guide organisations to manage this risk in a practical manner.

You will be:

• Acting as an Engagement Manager or Engagement Lead on projects, as an individual contributor;
• Conducting security assessments for various technology types and environments, with a focus on penetration testing;
• Guiding junior talent to become cybersecurity experts as well;
• Doing project management and developing security test plans around larger complex projects;
• Coordinate with clients and other subject matter experts in different fields, as required in projects; and
• Drive and develop capabilities in specific security areas, (E.g. Secure system architecture design in the cloud).

A suitable candidate would have some or most of the following attributes:

• Demonstrate deep understanding of penetration-testing methodologies, techniques, and remediation of security risks;
• Be able to identify vulnerabilities in web apps/web APIs, and pick up issues in code through manual source code reviews/static code analysis;
• Understand threats in different environments, from cloud, to endpoints or IoT systems. Perform review of hardening controls for such systems; and
• Think on your feet and adapt to new threats and technologies are they develop.

Experience and Certification

• 2 - 3 years of client facing consulting experience.
• Must have: OSCP or CREST CRT
• Some Executive Experience
• Must be able to speak English for our English speaking clients
• Preferred candidates with CAT 1 or 2A clearance for government projects.

The Mission:

Protect and enable growth of value creators, through excellence and integrity.

To be the first choice for visionary organisations and talents, and to turn every client into a client for life.

We are passionate about providing opportunities to our team members to be the best version of themselves and building partnerships with our clients to ensure cybersecurity empowers them towards their business goals.

The Team:

Our team is made up of Information Security professionals coming from all types of professional and personal backgrounds - we have a unique, international environment and believe in having fun at work. We offer benefits to help you in your career progression and in addition, we have training and certification opportunities, flexible hours, a great workplace environment, a culture focused on helping you become a balanced consultant while working in a technically strong, diverse team.

We are passionate about providing opportunities to our team members to be the best version of ourselves and building partnerships with our clients to ensure cybersecurity empowers them towards their business goals.

About Sekuro Asia

Sekuro Asia is an independent cybersecurity consulting firm and we have been operating for more than 10 years. We have offices located in more than 10 different cities across the globe with a growing presence in Asia.

We offer Cybersecurity services ranging from Offensive Security to Strategy, Governance, Risk and Compliance services, including ISO27001 implementation and adoption of other International Standards for our clients. We are ISO27001 certified, CREST Accredited and a PCI QSA company. We are a registered Services supplier for both the Singapore Government as well as the Australian Government.