Red Team Penetration Tester — Client-Focused Consultant

MENRVA PTE. LTD.; Singapore; On-site; SGD 80,000 - 120,000; Full time

Job summary

MENRVA PTE. LTD. is seeking an Offensive Security Consultant (Red Team) to perform hands-on penetration testing across applications, networks, cloud, and enterprise environments, and to lead or support engagements with clients.

You will mentor junior consultants, deliver remediation guidance, and help develop offensive capabilities within the practice. Applicants should have 2–3 years of consulting experience in cybersecurity, hold OSCP or CREST CRT, and demonstrate strong English communication

Qualifications

• 2–3 years of consulting experience in cybersecurity or offensive security.
• Required OSCP or CREST CRT certification.
• Experience presenting to stakeholders or executives is an advantage.
• Strong spoken English for client engagements.

Responsibilities

• Lead or manage security engagements as an Engagement Manager or Engagement Lead.
• Conduct penetration testing across applications, networks, cloud, and modern enterprise environments.
• Perform manual web application testing, API testing, and source code reviews.
• Assess hardening controls across cloud, endpoint, IoT, and other systems.
• Provide clear, actionable remediation guidance to clients.
• Mentor junior consultants and support capability development.
• Coordinate with clients and subject matter experts to deliver high‑quality outcomes.
• Contribute to secure architecture design, including cloud‑native environments.

Skills

Penetration testing

Vulnerability remediation

Cloud security

Client-facing communication

Education

OSCP or CREST CRT

Job description

MENRVA PTE. LTD. is seeking an Offensive Security Consultant (Red Team) to perform hands-on penetration testing across applications, networks, cloud, and enterprise environments, and to lead or support engagements with clients.

You will mentor junior consultants, deliver remediation guidance, and help develop offensive capabilities within the practice. Applicants should have 2–3 years of consulting experience in cybersecurity, hold OSCP or CREST CRT, and demonstrate strong English communication