Security Consultant

PASTELOPS PTE. LTD.; Singapore; Hybrid; SGD 68,000 - 98,000; Full time

Benefits offered by this job

Hybrid working

Job summary

Deliver remote or on-site assessments and use industry tools to uncover findings, then document clearly in technical reports.

Qualifications

• Minimum 1 year in cybersecurity assessments.
• OSCP or CREST CRT or higher.
• Familiar with OWASP Top 10, MITRE ATT&CK, and NIST.
• Ability to translate findings into actionable reports.
• Strong written and spoken English.

Responsibilities

• Deliver remote or on-site security assessments across Web, Mobile, API, Cloud and Network environments.
• Utilize Burp Suite, Nmap and Nessus for automated testing.
• Perform manual testing to uncover findings scanners miss.
• Document findings clearly and write technical reports.
• Communicate progress with clients and team; contribute to checklists and templates.

Skills

Cybersecurity experience

OWASP Top 10

MITRE ATT&CK

NIST framework

Manual testing workflows

Education

OSCP Certification

CREST CRT Certification

Tools

Burp Suite

Nmap

Nessus

Job description

Security Consultant

Role Overview

We are hiring Security Consultants to deliver end-to-end security assessments for our clients. You will test a wide range of systems (applications, infrastructure, cloud, and emerging technologies) then translate technical findings into clear, actionable recommendations. This role is hands‑on and client‑facing, suited for someone who enjoys deep technical work and communicates professionally throughout the engagement lifecycle.

Key Responsibilities

• Deliver remote or on‑site security assessments, such as Vulnerability Assessment and Penetration Testing , across varied environments such as Web/Mobile/API/Thick Client/Cloud/Network/Wireless
• Able to use industry‑standard tools (e.g. Burp Suite, Nmap, Nessus and supporting utilities) for automated approaches.
• Able to perform manual testing to uncover findings that scanners and automated tooling commonly miss
• Validate and document findings clearly, and write good technical reports
• Communicate internally with team and externally with clients regarding engagement's progress and status.
• Contribute to internal quality and capability such as improving checklists/playbooks, templates, and tooling, and sharing knowledge with the team and participate in peer reviews

Required Skills & Experience

• Preferably at least 1 year of working experience in cybersecurity such as in delivering cybersecurity assessments.
• Certification(s): OSCP or CREST CRT or higher.
• Familiarity with industry standards and frameworks, including OWASP Top 10 and related testing guides, MITRE ATT&CK , NIST .
• Good with using industry testing tools and workflows (e.g. Burp Suite, Nmap, Nessus ) and able to go beyond tool output through manual validation.
• Comfortable in picking up new knowledge and skills to deliver security assessments for cutting‑edge technology such as AI/LLM systems.
• Strong written and spoken English: Able to write clear and structured reports and able to explain complex technical issues simply and accurately.
• Professional and composed when interacting with clients during engagements.
• Self‑directed and reliable, able to deliver independently while collaborating effectively within the team.

Nice to Have

• Passion for cybersecurity
• Proven hands‑on experience performing security assessments such as Vulnerability Assessment, Penetration Testing, and Code Review across modern technology stacks.
• Past contributions to security research, tooling, publications, talks, CVEs or bug bounty programs.

Why Join Us?

• Hybrid Working - Any flexible working arrangements can be discussed.
• Strong technical team where you can exchange pointers with.
• High Technical Career Growth Potential - Technical growth of our consultants is important to us, so expect to level up a lot after joining us.
• Excellent Operational Support - As fellow practitioners, we know the usual pain points in this line of work thus extra effort is put in to make work better for everyone.