Senior Manager, Cybersecurity Assessment

eames consulting group (singapore) pte. ltd.; Singapore; On-site; SGD 140,000 - 200,000; Full time

Job summary

eames consulting group (singapore) pte. ltd. is seeking a hands-on cybersecurity professional with extensive offensive security experience to assess critical digital infrastructure. You’ll design and conduct technical security assessments, think beyond policies, and test whether controls are effective.

The role emphasizes practical testing, threat scenarios, and reporting findings with clear business impact, collaborating with technical teams and stakeholders across the engagement.

Qualifications

• Minimum 8 years of experience in cybersecurity, information security, penetration testing, red teaming, security assessment or a related area.
• Strong understanding of network security, cybersecurity controls and common attack techniques.
• Hands-on experience with penetration testing, offensive security or technical security assessments.
• Certifications such as OSCP/CREST/GIAC would be advantageous.
• Comfortable understanding complex technical environments and identifying potential weaknesses or attack paths.
• Strong communication and report-writing skills, with the ability to explain technical issues to non-technical stakeholders.

Responsibilities

• Stay across the latest cyber threats, attack techniques and industry trends to identify emerging areas of risk.
• Assess network architecture, security controls and vulnerabilities to determine where deeper testing is required.
• Design and conduct technical security assessments based on realistic cyber threat scenarios.
• Apply penetration testing, offensive security and other technical testing approaches to identify weaknesses and potential attack paths.
• Analyse findings and identify key security gaps, vulnerabilities and areas for improvement.
• Develop clear reports and recommendations, translating technical findings into wider security and business impact.
• Work closely with technical teams and industry stakeholders throughout assessments and remediation discussions.
• Explore new and innovative ways to test cybersecurity controls as the threat landscape continues to evolve.

Skills

Cybersecurity expertise

Penetration testing

Red team experience

Offensive security testing

Report writing

Education

OSCP

CREST

GIAC

Job description

We're looking for a cybersecurity professional with strong technical and offensive security experience to join a team focused on assessing the security of critical digital infrastructure.

This is a hands-on assessment role where you'll go beyond reviewing policies and controls — you'll look at how systems are designed, understand potential attack scenarios and technically test whether security measures are actually effective.

What you'll be doing:

• Stay across the latest cyber threats, attack techniques and industry trends to identify emerging areas of risk.
• Assess network architecture, security controls and vulnerabilities to determine where deeper testing is required.
• Design and conduct technical security assessments based on realistic cyber threat scenarios.
• Apply penetration testing, offensive security and other technical testing approaches to identify weaknesses and potential attack paths.
• Analyse findings and identify key security gaps, vulnerabilities and areas for improvement.
• Develop clear reports and recommendations, translating technical findings into wider security and business impact.
• Work closely with technical teams and industry stakeholders throughout assessments and remediation discussions.
• Explore new and innovative ways to test cybersecurity controls as the threat landscape continues to evolve.

What we're looking for:

• Minimum 8 years of experience in cybersecurity, information security, penetration testing, red teaming, security assessment or a related area.
• Strong understanding of network security, cybersecurity controls and common attack techniques.
• Hands-on experience with penetration testing, offensive security or technical security assessments.
• OSCP, CREST, GIAC or equivalent certifications would be advantageous.
• Comfortable understanding complex technical environments and identifying potential weaknesses or attack paths.
• Strong communication and report-writing skills, with the ability to explain technical issues to non-technical stakeholders.

What's in it for you?

You'll get exposure to a wide range of cybersecurity environments, technologies and emerging threats, while working on assessments that have a direct impact on the security and resilience of critical digital infrastructure.