Senior Security Consultant - OSCP

TECHKNOWLEDGEY PTE. LTD.; Singapore; On-site; SGD 120,000 - 180,000; Full time

Job summary

TECHKNOWLEDGEY PTE. LTD. is seeking a Senior Security Consultant with deep hands-on offensive security expertise to independently lead complex engagements and mentor junior consultants.

You will drive VAPT programs across network, web, and enterprise environments, translating findings into clear risk narratives and actionable remediation guidance for clients.

Qualifications

• Minimum 5 years hands-on experience in offensive security, penetration testing, or red teaming.
• Mandatory OSCP, CRT, OSWE certifications.
• Strong knowledge of network protocols, operating systems, AD environments, and web app architectures.
• Proficiency with offensive security tools and scripting/automation.
• Ability to translate technical findings into risk narratives and remediation guidance.
• Excellent written and verbal communication for stakeholders.

Responsibilities

• Lead and execute end-to-end offensive security engagements across networks, web apps, mobile apps, and infrastructure.
• Validate and exploit vulnerabilities to demonstrate business risk and impact.
• Produce technical and executive reports with clear risk narratives and remediation steps.
• Act as technical or project lead, mentoring juniors and ensuring quality.
• Serve as a key client contact for findings walkthroughs and remediation discussions.
• Contribute to internal testing methodologies, tools, and playbooks.
• Stay current with threats, exploitation techniques, and research.
• Support pre-sales and scoping with technical input when required.

Skills

Offensive security

Penetration testing

Red teaming

VAPT

Technical storytelling

Mentoring

Scripting & automation

Executive communication

Job description

Role Overview

We are seeking an experienced and highly capable Senior Security Consultant to join our client's cybersecurity team. This role is designed for a practitioner with strong hands‑on expertise in offensive security, who can independently lead complex engagements, mentor junior consultants, and act as a trusted technical advisor to clients.

Ideally, you should have deep experience in VAPT, adversarial techniques, and real‑world exploitation across network, web, and enterprise environments, with the ability to translate technical findings into meaningful risk narratives and actionable remediation guidance.

Key Responsibilities

• Lead and execute end-to-end offensive security engagements, including network, web application, mobile application, and infrastructure penetration testing.
• Validate and exploit identified vulnerabilities to demonstrate real-world impact and business risk.
• Produce high-quality technical and executive-level reports with clear risk narratives and actionable remediation recommendations.
• Serve as a technical or project lead during engagements, providing guidance, mentorship, and quality assurance to junior consultants.
• Act as a key technical point of contact for clients, including walkthroughs of findings and remediation discussions.
• Contribute to the development and improvement of internal testing methodologies, tools, and playbooks.
• Stay current with emerging threats, exploitation techniques, and offensive security research.
• Support pre‑sales and scoping activities by providing technical input when required.

Requirements

• Experience: Minimum 5 years of hands‑on experience in offensive security, penetration testing, or red teaming.
• Mandatory Certifications: OSCP, CRT, OSWE
• Strong understanding of network protocols, operating systems, Active Directory environments, and web application architectures.
• Deep knowledge of common attack techniques, vulnerabilities and frameworks (e.g., OWASP Top 10, MITRE ATT&CK, CWE).
• Highly proficient with industry-standard offensive security tools and comfortable with custom scripting and automation.
• Strong analytical mindset with the ability to think like an attacker and chain multiple weaknesses together.
• Excellent written and verbal communication skills, particularly in explaining technical risk to non-technical stakeholders.