Security Managed Services Associate Manager

Accenture; Singapore; On-site; SGD 90,000 - 130,000; Full time

Job summary

Accenture Singapore is seeking a senior security consultant to lead VAPT engagements across networks, applications, and cloud environments. You will drive offensive security assessments, mentor analysts, and articulate risk to executives.

You will leverage MITRE ATT&CK and OWASP frameworks to enhance testing effectiveness and deliver clear remediation plans within client engagements.

Qualifications

• Bachelor’s degree in a related field and hands-on experience with penetration testing and vulnerability assessments.
• Experience across enterprise environments, with offensive security engagements and reporting to stakeholders.
• Strong knowledge of MITRE ATT&CK and OWASP frameworks; capable of communicating findings clearly.

Responsibilities

• Lead planning, execution, and delivery of VAPT engagements across network, app, endpoint, cloud, and hybrid environments.
• Execute red team operations and threat simulations to test controls, detection, and incident response.
• Define engagement scope, objectives, rules of engagement, and risk priorities with clients and internal teams.
• Identify and exploit vulnerabilities using industry-standard methodologies with professional conduct.
• Analyze threat intelligence and adversary tactics to improve assessment relevance.
• Develop executive-ready reports communicating risks and remediation actions.
• Mentor junior security practitioners in offensive techniques and reporting practices.
• Contribute to continuous improvement of VAPT methodologies and automation capabilities.

Skills

Penetration testing

Vulnerability assessment

Offensive security

Application security

Network penetration testing

Cloud security assessments

Education

Bachelor’s degree in Cyber Security, Information Security, Computer Science, Information Technology

Job description

Key Responsibilities

• Lead the planning, execution, and delivery of Vulnerability Assessment and Penetration Testing (VAPT) engagements across network, application, endpoint, cloud, and hybrid environments.
• Execute and support advanced red team operations, adversary emulation exercises, and threat simulations to assess the effectiveness of security controls, detection capabilities, and incident response processes.
• Partner with client stakeholders and internal teams to define engagement scope, objectives, rules of engagement, and risk priorities.
• Identify, validate, and exploit security vulnerabilities using industry-standard methodologies, frameworks, and tools while maintaining high standards of professionalism and ethical conduct.
• Analyze threat intelligence, emerging attack techniques, and adversary tactics aligned with frameworks such as MITRE ATT&CK to enhance the effectiveness and relevance of security assessments.
• Develop clear, accurate, and executive-ready reports that communicate technical findings, business risks, and prioritized remediation actions.
• Mentor junior security practitioners by providing technical guidance, knowledge sharing, and support in offensive security techniques, tooling, and reporting practices.
• Contribute to the continuous improvement of VAPT methodologies, red team playbooks, automation capabilities, and service delivery standards to drive operational excellence and client value.

Required Qualifications

• Bachelor’s degree in Cyber Security, Information Security, Computer Science, Information Technology, or a related discipline.
• Proven experience performing penetration testing, vulnerability assessments, and offensive security engagements across enterprise environments.
• Strong hands‑on experience with application security testing, network penetration testing, cloud security assessments, and exploitation techniques.
• Deep understanding of modern attack methodologies, adversary tactics, and security frameworks, including MITRE ATT&CK and OWASP.
• Experience creating technical assessment reports and presenting findings to both technical and non-technical stakeholders.
• Strong problem-solving, analytical, and communication skills, with the ability to manage multiple priorities in a dynamic environment.
• Ability to collaborate effectively across teams and contribute to key security decisions and strategic initiatives.

Preferred Qualifications

• Industry certifications such as OSCP, OSEP, OSWE, CRTO, CREST, GPEN, GWAPT, GXPN, CISSP, or equivalent.
• Experience conducting red team operations, purple team exercises, and threat-led security assessments.
• Knowledge of cloud platforms such as Microsoft Azure, AWS, and Google Cloud Platform (GCP).
• Experience with security automation, scripting, and offensive security tooling.
• Familiarity with Security Operations Center (SOC) processes, threat hunting, and detection engineering.