Senior Offensive Security Lead - VAPT & Red Team

PwC; Singapore; On-site; SGD 120,000 - 180,000; Full time

Job summary

PwC is seeking an experienced offensive security leader in Singapore to drive end-to-end security testing engagements (VAPT, HCR, SCR, etc.) across networks, apps, APIs, mobile, and cloud. You will manage scopes, timelines, and quality while coordinating with threat intel and internal teams to deliver actionable remediation guidance.

You will also contribute to business development, develop project plans, and present to technical and executive audiences.

Qualifications

• Bachelor's degree in Computer Engineering/Science or Information Security.
• Minimum 3–5 years in offensive security / security testing.
• Experience managing multiple security testing projects with tight deadlines.
• Hands-on end-to-end engagement delivery (scoping, execution, reporting, closure).
• Experience with effort estimation, scoping, and pricing of security engagements.
• CREST CRT certification is required at minimum.

Responsibilities

• Lead end-to-end Security Testing engagements from scoping to closure.
• Manage multiple projects with SLAs, timelines, and quality benchmarks.
• Develop plans, trackers, and dashboards for active engagements.
• Coordinate with consultants, QA reviewers, threat intel teams.
• Conduct kick-off calls, weekly reviews, and client debriefs.
• Identify risks, escalate, and drive timely resolution.
• Ensure reports and remediation guidance meet quality standards.
• Improve testing delivery processes and templates.

Skills

Targeted pentests

Wireless/Web/Network testing

Red Team infrastructure

Scripting (Python/PowerShell)

Networking protocols

OS platforms (Unix/Linux/Windows)

Cloud security assessments

Compliance-driven VAPT (PCI-DSS/NIST/S

Education

Bachelor's degree in Computer Engineering/Science or Information Security

Job description

PwC is seeking an experienced offensive security leader in Singapore to drive end-to-end security testing engagements (VAPT, HCR, SCR, etc.) across networks, apps, APIs, mobile, and cloud. You will manage scopes, timelines, and quality while coordinating with threat intel and internal teams to deliver actionable remediation guidance.

You will also contribute to business development, develop project plans, and present to technical and executive audiences.