Security Managed Services Lead (VAPT)

Accenture PLC; Singapore; On-site; SGD 90,000 - 150,000; Full time

Job summary

Accenture PLC is seeking a senior security consultant to lead VAPT engagements across network, web, endpoint, cloud, and hybrid environments. You will execute red team operations, align with client stakeholders on scope and risk, and deliver executive-ready reports with prioritized remediations.

The role requires hands-on penetration testing expertise, knowledge of MITRE ATT&CK/OWASP, and the ability to mentor junior staff while improving methodologies and tooling.

Qualifications

• Bachelor’s degree in Cyber Security, Information Security, Computer Science, Information Technology, or related discipline.
• Proven experience performing penetration testing, vulnerability assessments, and offensive security engagements.
• Strong hands-on experience with application security testing, network pen testing, cloud security assessments, and exploitation techniques.
• Deep understanding of modern attack methodologies, adversary tactics, and security frameworks (MITRE ATT&CK, OWASP).
• Experience creating technical assessment reports and presenting findings to technical and non-technical stakeholders.

Responsibilities

• Lead planning, execution, and delivery of VAPT engagements across network, application, endpoint, cloud, and hybrid environments.
• Execute and support red team operations, adversary emulation exercises, and threat simulations.
• Partner with client stakeholders to define engagement scope, objectives, rules of engagement, and risk priorities.
• Identify, validate, and exploit security vulnerabilities using methods and tools while upholding ethics.
• Analyze threat intelligence and adversary tactics to enhance assessments.
• Develop clear, executive-ready reports communicating risks and remediation actions.
• Mentor junior practitioners in offensive security techniques, tooling, and reporting.
• Contribute to continuous improvement of VAPT methodologies and playbooks.

Skills

Penetration testing

Vulnerability assessments

Offensive security

Application security testing

Network penetration testing

Cloud security

MITRE ATT&CK

OWASP

Technical reporting

Communication

Team collaboration

Education

Bachelor's degree in Cyber Security/Information Security

Job description

Key Responsibilities

• Lead the planning, execution, and delivery of Vulnerability Assessment and Penetration Testing (VAPT) engagements across network, application, endpoint, cloud, and hybrid environments.
• Execute and support advanced red team operations, adversary emulation exercises, and threat simulations to assess the effectiveness of security controls, detection capabilities, and incident response processes.
• Partner with client stakeholders and internal teams to define engagement scope, objectives, rules of engagement, and risk priorities.
• Identify, validate, and exploit security vulnerabilities using industry-standard methodologies, frameworks, and tools while maintaining high standards of professionalism and ethical conduct.
• Analyze threat intelligence, emerging attack techniques, and adversary tactics aligned with frameworks such as MITRE ATT&CK to enhance the effectiveness and relevance of security assessments.
• Develop clear, accurate, and executive-ready reports that communicate technical findings, business risks, and prioritized remediation actions.
• Mentor junior security practitioners by providing technical guidance, knowledge sharing, and support in offensive security techniques, tooling, and reporting practices.
• Contribute to the continuous improvement of VAPT methodologies, red team playbooks, automation capabilities, and service delivery standards to drive operational excellence and client value.

Required Qualifications

• Bachelor’s degree in Cyber Security, Information Security, Computer Science, Information Technology, or a related discipline.
• Proven experience performing penetration testing, vulnerability assessments, and offensive security engagements across enterprise environments.
• Strong hands-on experience with application security testing, network penetration testing, cloud security assessments, and exploitation techniques.
• Deep understanding of modern attack methodologies, adversary tactics, and security frameworks, including MITRE ATT&CK and OWASP.
• Experience creating technical assessment reports and presenting findings to both technical and non-technical stakeholders.
• Strong problem-solving, analytical, and communication skills, with the ability to manage multiple priorities in a dynamic environment.
• Ability to collaborate effectively across teams and contribute to key security decisions and strategic initiatives.

Preferred Qualifications

• Industry certifications such as OSCP, OSEP, OSWE, CRTO, CREST, GPEN, GWAPT, GXPN, CISSP, or equivalent.
• Experience conducting red team operations, purple team exercises, and threat-led security assessments.
• Knowledge of cloud platforms such as Microsoft Azure, AWS, and Google Cloud Platform (GCP).
• Experience with security automation, scripting, and offensive security tooling.
• Familiarity with Security Operations Center (SOC) processes, threat hunting, and detection engineering.