T&T - Consultant - Cyber Defense & Resilience (offsec) - SG

Deloitte Southeast Asia; Singapore; On-site; SGD 60,000 - 110,000; Full time

Job summary

Deloitte in Singapore is seeking a skilled Penetration Tester to assess and secure systems, networks, and applications. You will conduct controlled penetration tests, document vulnerabilities, and provide actionable security recommendations across software, web services, and networks.

Ideal candidates have 2–4 years in cybersecurity, hands-on testing experience, and relevant certifications (oscp/oswp/crest/ceh).

Qualifications

• Bachelor's degree in information security, information systems management, computer science, or related discipline.
• 2–4 years of IT or cybersecurity experience.
• Proven experience as a Penetration Tester or similar role in cybersecurity.
• Proficiency with automated tools and manual testing techniques.
• Strong understanding of common vulnerabilities and exploits.
• Relevant certifications (e.g., OSCP, OSWP, CREST, CEH) are a plus.

Responsibilities

• Conduct security assessments of systems, networks, and applications.
• Perform software/web/mobile penetration testing and document findings.
• Identify vulnerabilities and provide remediation recommendations.
• Develop and execute penetration testing methodologies.
• Prepare detailed reports on findings and recommendations.
• Stay updated with latest testing tools and techniques.

Skills

Penetration testing

Cybersecurity

Report writing

Threat analysis

Education

Bachelor's degree in information security

Tools

Nmap

Burp Suite

Metasploit

Job description

Select how often (in days) to receive an alert:

Date: 12 Oct 2026

Location: Singapore, Singapore, SG

Are you ready to unleash your potential?

At Deloitte, our purpose is to make an impact that mattersforour clients, our people, and the communities we serve.

We believe we have a responsibility to be a force forgood, and WorldImpact is our portfolio of initiatives focused on making a tangible impact on society’s biggest challenges and creating a better future. We strive to advise clients on how to deliver purpose-led growth and embed moreequitable,inclusive as wellassustainable business practices.

Hence, we seek talented individuals driven to excel and innovate, working together to achieve our shared goals.

We are committed to creating positive work experiences that foster a culture of respect and inclusion, where diverse perspectives are celebrated, and everyone isrecognisedfor their contributions.

Ready to unleash your potential with us? Join the winning team now!

Identifiesand mitigates cyber risks by assessing systems, networks, and applications for vulnerabilities. They simulate real-world attacks, document findings, and provide security improvement recommendations. Staying updated on cybersecurity trends, they collaborate with other professionals to develop comprehensive security strategies.

Conduct security assessments on systems, networks, and applications.

Simulatecyber attackstoidentifysystem vulnerabilities.

Typical security testing activities include:

Software/Web Application/Web Services penetration testing

Thick Client Penetration Testing

Develop and execute penetration testing methodologies.

Prepare detailed reports on the findings of penetration tests.

Recommend and implement improvements to security policies.

Stay updated with the latest penetration testing tools and techniques.

Train staff on security awareness and procedures.

Collaborate with IT staff to improve system security.

Your role as a leader:

At Deloitte, we believe in the importance of empowering our people to be leaders at all levels. We expect our people to embrace and live our purpose and shared values, challenging themselves every day toidentifyissues that are most important to our clients, ourpeopleand the communities, and to make an impact that matters. Additionally,Analystsacross our Firm are expected to:

Actively seek out developmental opportunities for growth, act as strong brand ambassadors for the firm as well as share their knowledge and experience with others.

Understand the goals of our internal and externalstakeholderto set personal priorities as well as align their teams’ work to achieve theobjectives.

Constantly challenge themselves, collaborate with others to deliver on tasks and take accountability for the results.

Build productive relationships and communicate effectivelyin order topositively influence teams and other stakeholders.

Project integrity and confidence while motivating others through team collaboration as well asrecognisingindividual strengths, differences, and contributions.

Requirements:

If you are someone with:

Bachelor's degree in information security, information systems management, computer science, engineering, or other relateddiscipline.

2 –4years of experience in information technology, IT audits, or cyber security.

Proven experience as a Penetration Tester or similar role in cybersecurity.

Proficiencyin using automated tools and manual testing techniques.

Strong understanding of common vulnerabilities and exploits.

Relevant certifications (e.g., OSCP,OSWP,CREST, CEH) are a plus.

Excellent problem-solving and analytical skills.

Must be able to work under pressure and produce content to tight timelines.

Ability to self-manage, prioritizing a variety of tasks.

In Singapore, the services are provided by Deloitte and other related entities in Singapore("Deloitte in Singapore"), which are affiliates of Deloitte Southeast Asia Ltd. Deloitte Southeast Asia Ltd is a member firm of Deloitte Touche Tohmatsu Limited. Deloitte in Singapore, which is within the Deloitte Network, is the entity that is providing this Website.