Senior Offensive Security Lead

PwC Singapore; Singapore; On-site; SGD 120,000 - 180,000; Full time

Job summary

PwC Singapore is seeking an experienced offensive security professional to lead end-to-end security testing engagements, including VAPT, HCR and SCR, within the Risk and Security Controls practice. The role blends deep technical testing with project management and a commercial mindset.

You will coordinate with consultants, QA reviewers, and threat intelligence, manage multiple projects with tight deadlines, and deliver clear reports and remediation guidance for technical teams and executives

Qualifications

• Bachelor's degree in Computer Engineering/Information Security or equivalent.
• 3–5 years of relevant offensive security/security testing experience.
• Experience in managing multiple security testing projects with tight deadlines.
• Experience with effort estimation, scoping, and pricing of security assessment engagements.
• Certifications: CREST CRT (required).

Responsibilities

• Own and manage Security Testing engagements end-to-end from scoping to closure.
• Coordinate with internal teams to ensure timely delivery and output quality.
• Conduct vulnerability assessments and penetration testing across networks, web apps, mobile apps, APIs, cloud and infrastructure.
• Prepare detailed reports with actionable remediation recommendations for technical and executive audiences.
• Stay up to date on cybersecurity threats and industry trends; interface with clients to address concerns.

Skills

Penetration testing

VAPT

Threat modeling

Project management

Security reporting

Client communication

Education

Bachelor's degree in Computer Engineering or Information Security

Job description

PwC Singapore is seeking an experienced offensive security professional to lead end-to-end security testing engagements, including VAPT, HCR and SCR, within the Risk and Security Controls practice. The role blends deep technical testing with project management and a commercial mindset.

You will coordinate with consultants, QA reviewers, and threat intelligence, manage multiple projects with tight deadlines, and deliver clear reports and remediation guidance for technical teams and executives