Senior Penetration Tester/Team Lead

FORTIEDGE PTE. LTD.; Singapore; On-site; SGD 120,000 - 180,000; Full time

Job summary

Fortiedge is seeking a highly skilled Senior Penetration Tester and Team Lead to join our growing cybersecurity consulting practice in Singapore. This role blends hands-on testing with leadership of a high-performance delivery team, mentoring colleagues and guiding project delivery.

You will spearhead web and mobile assessments (iOS/Android), perform VAPT and SAST, audit cloud environments (AWS/Azure), and translate findings into actionable business risk insights for clients.

Qualifications

• Minimum 5–7 years in penetration testing.
• 1–2 years in a leadership or supervisory role.
• OSCP, OSEP, CREST CRT/CCT, or equivalent advanced certifications.

Responsibilities

• Lead and execute security assessments with a primary focus on Web and Mobile pentesting.
• Review junior/mid-level consultants' findings for technical accuracy and quality.
• Conduct VAPT and SAST engagements across cloud and on-prem environments.
• Engage with clients to translate security findings into actionable business risk insights and manage project lifecycles.

Skills

Penetration testing

Leadership

Web pentesting

Mobile pentesting

Cloud security

Tools

Burp Suite

Nessus

Proxy tools

Android/iOS testing

Job description

Job Description & Requirements

Fortiedge is seeking a highly skilled and motivated Senior Penetration Tester / Team Lead to join our growing cybersecurity consulting team. This role is designed for a technical expert who is ready to balance high-level hands-on execution with the mentorship and operational leadership of a high-performance delivery team.

Core Responsibilities

1. Technical Leadership & Execution

• Lead and execute complex security assessments, with a primary focus on Web Application Penetration Testing and Mobile App Penetration Testing (iOS and Android).




• Perform comprehensive Vulnerability Assessment and Penetration Testing (VAPT) and Static Application Security Testing (SAST).




• Conduct Cloud Infrastructure Audits (AWS/Azure), focusing on environment hardening and identity management.




• Review and validate the findings of junior and mid-level consultants to ensure technical accuracy and high-quality deliverables.




• Stay at the forefront of the threat landscape to develop and refine custom testing methodologies and exploit scripts.

2. Team Management & Talent Grooming

• Oversee a dedicated team of security consultants, managing project timelines and resource allocation.




• Champion the \"Zero to Hero\" Technical Onboarding policy, guiding new hires through foundational training and the Bootcamp for Operational Readiness.




• Act as a mentor for career milestones, such as OSCP or CREST certifications, and conduct regular competency reviews.




• Foster a culture of continuous learning, research, and development within the team.

3. Consulting & Client Engagement

• Serve as a primary technical point of contact for clients, translating complex security findings into actionable business risk insights.




• Manage project lifecycles, including scoping, kick-off meetings, and the delivery of final remediation reports.




• Enforce strict remediation policies, including managing the standard three-rescan limit for structured government-linked projects.




• Collaborate with internal stakeholders to refine service delivery frameworks and operational efficiency.

Required Qualifications & Skills

• Experience: Minimum 5–7 years of professional experience in penetration testing, with at least 1–2 years in a leadership or supervisory capacity.




• Web & Mobile Expertise: Deep understanding of the OWASP Top 10 (Web and Mobile), including hands-on experience with proxy tools, de-compilation, and bypass techniques.




• Certifications: OSCP, OSEP, CREST CRT/CCT, or equivalent advanced technical certifications.




• Cloud Security: Proven experience auditing cloud environments, specifically AWS Config and CloudTrail.




• Analytical Rigor: Strong proficiency in manual testing techniques beyond automated scanning tools (Nessus, Burp Suite, etc.).




• Communication: Exceptional report‑writing skills and the ability to communicate technical vulnerabilities to both technical and executive audiences.

Why Join Fortiedge?

At Fortiedge, we are committed to scaling excellence. You will have the opportunity to work at the forefront of cybersecurity consulting, moving beyond standard compliance to solve deep technical challenges. We value practitioners who are as passionate about building a team as they are about breaking into systems.