Senior / Lead Offensive Cybersecurity Engineer (VAPT)

Assurity Trusted Solutions; Singapore; On-site; SGD 80,000 - 100,000; Full time

Job summary

A government cybersecurity subsidiary is seeking a Senior/Lead Offensive Cybersecurity Engineer to lead Vulnerability Assessment and Penetration Testing initiatives. The role involves guiding a team, conducting security assessments, and providing consultancy services to enhance customers' security postures. Ideal candidates will have over 8 years of cybersecurity experience, with expertise in VAPT tools and methodologies. A competitive remuneration package will align with qualifications and experience.

Benefits

Learning culture and growth opportunities

Qualifications

• Minimum 8 years of experience in cybersecurity with focus on VAPT.
• Proven track record in leading VAPT practices and customer engagement.
• Experience in adversary simulation or purple teaming is a plus.

Responsibilities

• Conduct thorough Vulnerability Assessment and Penetration Testing across systems.
• Lead source code reviews to ensure security standards.
• Produce technical documentation detailing vulnerabilities and remediation guidance.

Skills

Vulnerability Assessment and Penetration Testing (VAPT)

Cybersecurity principles and frameworks

Communication and interpersonal skills

Education

Relevant cybersecurity certifications (e.g., OSCP, OSWE, OSEP)

Tools

OWASP

NIST

MITRE ATT&CK

Job description

Assurity Trusted Solutions (ATS) is a wholly owned subsidiary of the Government Technology Agency (GovTech). As a Trusted Partner over the last decade, ATS offers a comprehensive suite of products and services ranging from infrastructure and operational services, authentication services, governance and assurance services as well as managed processes. In a dynamic digital and cyber landscape, where trust & collaboration are key, ATS continues to drive mutually beneficial business outcomes through collaboration with GovTech, government agencies and commercial partners to mitigate cyber risks and bolster security postures.

As a Senior/Lead Offensive Cybersecurity Engineer, you'll take charge of guiding a dynamic team in exciting security testing initiatives or showcasing your expertise through independent security assessments as a solo practitioner.

Job Summary

• Responsible for thorough Vulnerability Assessment and Penetration Testing (VAPT) initiatives across a wide spectrum of systems, networks, and applications, catering to a diverse clientele that includes everything from small and medium-sized businesses to large enterprises.
• Lead source code reviews and host configuration reviews to verify customers’ systems are aligned to industry best practices and security standards
• Produce comprehensive technical documentation detailing discovered vulnerabilities, impact analysis, risk assessment, and actionable remediation guidance
• Manage key customer stakeholders
• Support engagement scoping and services based on customer’s requirements and objectives
• Stay current with evolving threat landscapes, emerging vulnerabilities, and industry developments to continuously advance organisational VAPT competencies
• Deliver expert cybersecurity consultancy services, providing recommendations to enhance customers’ security posture
• Establish technical methodologies and standards to maintain excellence across VAPT delivery teams
• Guide and mentor junior offensive cybersecurity engineers during active engagements to build team capabilities
• Review technical deliverables and reporting to ensure consistent standards.

To succeed in this role, you will ideally have:

• Minimum 8 years of experience in cybersecurity, with a focus on VAPT
• Proven track record in establishing and leading VAPT practices, including customer engagement
• Extensive technical proficiency in executing VAPTs across diverse systems, networks, and applications
• Strong understanding of cybersecurity principles, frameworks, and best practices
• Experience with industry standard VAPT tools and methodologies, such as OWASP, NIST, and MITRE ATT&CK
• Excellent communication and interpersonal skills, with the ability to effectively interact with customers, team members, and senior management
• Relevant certifications such as OSCP, OSWE and OSEP, or similar are highly desirable
• Experience in conducting adversary simulation or purple teaming is a plus.

Join us and discover a meaningful and exciting career with Assurity Trusted Solutions!

The remuneration package will commensurate with your qualifications and experience. Interested applicants, please click "Apply Now".

We thank you for your interest and please note that only shortlisted candidates will be notified.

By submitting your application, you agree that your personal data may be collected, used and disclosed by Assurity Trusted Solutions Pte. Ltd. (ATS), GovTech and their service providers and agents in accordance with ATS’s privacy statement which can be found at: https://www.assurity.sg/privacy.html or such other successor site.

• A wholly-owned subsidiary of GovTech.
• We promote a learning culture and encourage you to grow and learn.