Penetration Testers, Diverse Industries

Kerry Consulting; Singapore; On-site; SGD 120,000 - 180,000; Full time

Job summary

Kerry Consulting in Singapore seeks a senior security testing lead to drive advanced penetration testing, red teaming, and adversary emulation engagements. You will manage multiple projects and teams, deliver test plans and reports, and present outcomes to technical and executive stakeholders.

You will run client workshops, threat briefings, and support pre-sales while maintaining deep knowledge of attacker TTPs, threat modelling, and regulatory frameworks.

Qualifications

• 5–8 years of pentesting or red teaming experience.
• Hands-on across AD, Windows and Linux environments.
• Relevant certifications (OSCP, OSCE, CREST, SEC660, SEC564) or credible CTF success.

Responsibilities

• Lead and deliver penetration testing and red team engagements.
• Produce test plans, methodologies, and reports.
• Present outcomes to technical and executive stakeholders.
• Mentor junior testers and support marketing activities.

Skills

Penetration testing

Red teaming

Adversary emulation

Threat modelling

Client-facing

Python

PowerShell

Bash

Education

OSCP

OSCE

CREST

SEC660

SEC564

Tools

Active Directory

Windows

Linux

Enterprise environments

Job description

Role

Lead and deliver advanced penetration testing, red teaming, and adversary emulation engagements, while managing multiple projects and team workload. Produce and quality-assure test plans, methodologies, and reports, and present outcomes to technical and executive stakeholders. Run client workshops, threat briefings, and support pre-sales, maintaining strong knowledge of attacker TTPs, threat modelling, and regulatory frameworks. Mentor junior testers, contribute to internal training, and support marketing and thought leadership through blogs, talks, and events.

Requirements

Degree Certified, you have at least 5 to 8 years' experience in penetration testing or red teaming, with a proven track record delivering in high-pressure, client-facing environments. You possess strong understanding of the cyber kill chain, threat actor TTPs, and an adversarial mindset, with hands-on familiarity across Active Directory, Windows/Linux administration, and common enterprise environments. Proficient in scripting or programming (for example Python, PowerShell, .NET, Bash), supported by relevant certifications (OSCP, OSCE, CREST, SEC660, SEC564) and or credible CTF achievements.