Security Consultant – VAPT

REVUP PROSERVICES PTE. LTD.; Singapore; On-site; SGD 60,000 - 90,000; Full time

Job summary

A leading cybersecurity firm in Singapore is seeking a skilled Security Consultant - VAPT to support sales and execute security testing. The ideal candidate should have 3-5 years of relevant experience, conduct thorough vulnerability assessments, and hold necessary certifications including CREST CRT and OSCP. This role involves both manual and automated testing and presenting findings. Competitive salary and benefits offered.

Qualifications

• 3-5 years of security experience in a similar role.
• At least 3 years conducting vulnerability assessments and penetration testing.
• Required certifications: CREST CRT, CREST Practitioner Security Analyst, OSCP.

Responsibilities

• Support sales: attend meetings, estimate effort.
• Develop security acceptance test plans.
• Execute manual and automated security testing using commercial tools.

Skills

Vulnerability assessments

Penetration testing

Security testing guidelines

Technical support

Security tool configuration

Education

Bachelor’s degree in Computer Science / Information Systems

Tools

Burp

Nessus

Nmap

Metasploit

SonarQube

Job description

Security Consultant -VAPT

• Permanent role
• Work location: CBD area

The Opportunity

• Support sales as needed: attend meetings, estimate effort, provide timelines.
• Develop security acceptance test plans.
• Provide technical support during testing activities.
• Prepare test environments: configure/install security tools.
• Execute manual and automated security testing using commercial tools.
• Perform Greybox (authenticated) and Blackbox (unauthenticated) penetration tests on networks.
• Conduct Whitebox testing and secure code reviews.
• Perform network & infrastructure vulnerability assessments and penetration tests.
• Perform web, mobile and desktop application vulnerability assessments and penetration tests.
• Identify and pinpoint vulnerabilities in target systems/applications.
• Document and report findings.
• Recommend mitigations and remediation steps.
• Present results to stakeholders.
• Provide weekly status reports on testing progress.

Your Background

• Bachelor’s degree (Computer Science / Information Systems) or equivalent experience.
• 3–5 years’ security experience (analyst/engineer/architect/consultant or similar).
• At least 3 years conducting vulnerability assessments and penetration testing.
• Required certification: CREST CRT, CREST Practitioner Security Analyst and OSCP.
• Familiarity with security testing guidelines and standards.
• Experience configuring and running SonarQube offline.
• Strong proficiency in manual and automated penetration testing across networks, servers, web apps, APIs, wireless, mobile, DBs, etc. (techniques: injection, privilege escalation, fuzzing, buffer overflows, etc.).
• Tool experience: proxies, port scanners, vulnerability scanners, exploit frameworks (e.g., Burp, Nessus, Nmap, Metasploit).
• Experience/knowledge of Semgrep is an advantage.
• Only Singaporeans

May Anne Ramos

Senior Consultant | R1110127

Revup Proservices Pte Ltd | EA.24C2366