Security Testing & Assurance Specialist (VAPT, OWSTG)

NCS; Singapore; On-site; SGD 90,000 - 120,000; Full time

Job summary

NCS is a leading technology services firm in APAC seeking a Security Testing & Assurance Specialist (VAPT, OWSTG) in Singapore. You will conduct penetration tests, code reviews, and host assessments, using Metasploit, Burp Suite, Nessus, and scripting tools to identify vulnerabilities.

You will translate findings into actionable security recommendations for clients and internal teams. The role emphasizes adherence to OWSTG/PTES methodologies, strong communication, and collaboration with

Qualifications

• Experience in penetration testing, source code review, and host security assessments.
• Strong technical expertise in security testing methodologies, tools, and frameworks such as Metasploit, Kali Linux, Burp Suite, and Tenable Nessus.
• Proficiency in scripting languages (e.g., Python, Bash, or PowerShell) for security automation and testing.

Responsibilities

• Conduct technical security assessments, including penetration testing, source code review, and security configuration analysis.
• Utilize industry-recognized processes and tools to identify and assess vulnerabilities.
• Work with clients and internal teams to deliver effective security solutions and recommendations.
• Perform compliance audits and system reviews against best practices, policies, and guidelines.
• Articulate security findings through reports and presentations for technical and non-technical stakeholders.

Skills

Penetration testing

Source code review

Host security assessment

Metasploit

Kali Linux

Burp Suite

Tenable Nessus

Python

Bash

PowerShell

Web technologies

OSI model

OWASP OWSTG

PTES

OSCP

CREST CRT

Communication

Team collaboration

Education

Cybersecurity degree

Diploma alternative

Tools

Metasploit

Kali Linux

Burp Suite

Tenable Nessus

Job description

Security Testing & Assurance Specialist (VAPT, OWSTG)

• Full-time
• Department: Others

NCS is a leading technology services firm that operates across the Asia Pacific region in over 20 cities, providing consulting, digital services, technology solutions, and more. We believe in harnessing the power of technology to achieve extraordinary things, creating lasting value and impact for our communities, partners, and people. Our diverse workforce of 13,000 has delivered large-scale, mission-critical, and multi-platform projects for governments and enterprises in Singapore and the APAC region.

• Conduct technical security assessments, including penetration testing, source code
• review, and security configuration analysis.
• Utilize industry-recognized processes and tools to identify and assess security
• vulnerabilities, aligning with strategic, tactical, and operational security objectives.
• Work closely with clients and internal teams to deliver eective security solutions and
• recommendations.
• Perform compliance audits and system reviews against industry best practices, security
• policies, and procedural guidelines.
• Clearly articulate security findings through detailed reports and presentations, tailored
• for both technical and non-technical stakeholders.

• Experience in penetration testing, source code review, and host security assessments.
• Strong technical expertise in security testing methodologies, tools, and frameworks
• such as Metasploit, Kali Linux, Burp Suite, and Tenable Nessus.
• Proficiency in scripting languages (e.g., Python, Bash, or PowerShell) for security
• automation and testing.
• Solid understanding of web application technologies, network security principles, and
• the OSI model (including HTTP, DNS, SSH, FTP, etc.).
• Familiarity with established security testing methodologies, including the OWASP Web
• Security Testing Guide (OWSTG) and the Penetration Testing Execution Standard (PTES).
• Relevant industry certifications (e.g., OSCP, CREST CRT) are highly advantageous.
• Strong interpersonal and communication skills, with the ability to collaborate eectively
• in a team environment.
• A degree in cybersecurity, computer science, or a related field is preferred; however,
• candidates with a diploma or equivalent experience will be considered.
• Enthusiastic about continuous learning and professional growth in the cybersecurity
• field.

We are driven by our AEIOU beliefs—Adventure, Excellence, Integrity, Ownership, and Unity—and we seek individuals who embody these values in both their professional and personal lives. We are committed to our Impact: Valuing our clients, Growing our people, and Creating our future.

Together, we make the extraordinary happen.

Learn more about us at ncs.co and visit our LinkedIn career site.

We are driven by our AEIOU beliefs—Adventure, Excellence, Integrity, Ownership, and Unity—and we seek individuals who embody these values in both their professional and personal lives. We are committed to our Impact: Valuing our clients, Growing our people, and Creating our future.

Together, we make the extraordinary happen.

Learn more about us at ncs.co and visit our LinkedIn career site.