VAPT & OWSTG Security Specialist: Impact-Driven Testing

NCS; Singapore; On-site; SGD 90,000 - 120,000; Full time

Job summary

NCS is a leading technology services firm in APAC seeking a Security Testing & Assurance Specialist (VAPT, OWSTG) in Singapore. You will conduct penetration tests, code reviews, and host assessments, using Metasploit, Burp Suite, Nessus, and scripting tools to identify vulnerabilities.

You will translate findings into actionable security recommendations for clients and internal teams. The role emphasizes adherence to OWSTG/PTES methodologies, strong communication, and collaboration with

Qualifications

• Experience in penetration testing, source code review, and host security assessments.
• Strong technical expertise in security testing methodologies, tools, and frameworks such as Metasploit, Kali Linux, Burp Suite, and Tenable Nessus.
• Proficiency in scripting languages (e.g., Python, Bash, or PowerShell) for security automation and testing.

Responsibilities

• Conduct technical security assessments, including penetration testing, source code review, and security configuration analysis.
• Utilize industry-recognized processes and tools to identify and assess vulnerabilities.
• Work with clients and internal teams to deliver effective security solutions and recommendations.
• Perform compliance audits and system reviews against best practices, policies, and guidelines.
• Articulate security findings through reports and presentations for technical and non-technical stakeholders.

Skills

Penetration testing

Source code review

Host security assessment

Metasploit

Kali Linux

Burp Suite

Tenable Nessus

Python

Bash

PowerShell

Web technologies

OSI model

OWASP OWSTG

PTES

OSCP

CREST CRT

Communication

Team collaboration

Education

Cybersecurity degree

Diploma alternative

Tools

Metasploit

Kali Linux

Burp Suite

Tenable Nessus

Job description

NCS is a leading technology services firm in APAC seeking a Security Testing & Assurance Specialist (VAPT, OWSTG) in Singapore. You will conduct penetration tests, code reviews, and host assessments, using Metasploit, Burp Suite, Nessus, and scripting tools to identify vulnerabilities.

You will translate findings into actionable security recommendations for clients and internal teams. The role emphasizes adherence to OWSTG/PTES methodologies, strong communication, and collaboration with