VAPT Team Lead (DSC/JH)

ST ENGINEERING INFO-SECURITY PTE. LTD.; Singapore; On-site; SGD 120,000 - 180,000; Full time

Job summary

ST ENGINEERING INFO-SECURITY PTE. LTD. is seeking a seasoned VAPT lead to manage a team of engineers, guide junior staff, and drive security testing across client environments.

You will report on progress, coordinate with stakeholders, and provide SME-level guidance on vulnerability assessment processes and technical challenges. The role requires strong leadership, project execution capabilities, and a proactive approach to staying current with cyber threats and mitigation techniques.

Qualifications

• 5+ years of cybersecurity experience in security testing and reviews.
• 2+ years of leadership experience overseeing a team.
• Familiarity with Mindef-related projects.
• Certifications such as CEH, GPEN, GWAPT, GMOB add advantage.
• Proficient with security tools Burp Suite, Kali Linux, Metasploit, Nessus, Nmap, Wireshark.

Responsibilities

• Lead a team of VAPT engineers and guide juniors.
• Report delivery status of inter-related projects.
• Drive projects with stakeholders to completion.
• Provide guidance as a Security Vulnerability Assessment SME.
• Conduct vulnerability assessments and pentests in customer environments.
• Prepare comprehensive reports and deliver stakeholder presentations.
• Stay updated on emerging cybersecurity threats and vulnerabilities.

Skills

Leadership

Team management

Communication

Stakeholder management

Independent work

Education

CREST CRT (Pen) or OSCP preferred

Tools

Burp Suite

Kali Linux

Metasploit

Nessus

Nmap

Wireshark

Job description

Responsibilities:

• Lead a team of fellow VAPT engineers and provide guidance to junior VAPT engineers
• Report on the delivery status of a group of inter-related projects, including commercial and implementation milestones
• Drive projects with relevant stakeholders to achieve completion
• Provide guidance to stakeholders and implementation teams as a Security Vulnerability Assessment (SVA) SME both on the process and on any related technical complexities
• Conduct one (or more) of the following in customer environments, either individually or as a team:
• To conduct vulnerability assessment and penetration test on networks, web applications, mobile applications, wireless systems, clouds, IOT
• To perform host configuration review of OS, applications and networks
• To perform security analysis on the vulnerabilities
• To prepare comprehensive reports with document findings
• To deliver presentations to stakeholders
• Keep abreast of new developments, emerging threats and vulnerabilities in cybersecurity practices and technologies.

Requirements:

• Experience and familiar with Mindef related projects
• Possess either CREST CRT (Pen) or OSCP is preferred
• Possess one (or more) of the following Security certifications: CEH, GPEN, GWAPT, GMOB would be an added advantage
• Familiar with various tools Burp Suite, Kali Linux, Metasploit, Nessus, Nmap, Wireshark, etc…is an added advantage
• Possess at least 5 years of cyber security experience in security testing, review, including 2 years of leading a team will be preferred
• Possess leadership and team management skills
• Ability to push stakeholders and drive projects to completion
• Ability to collaborate with team members, execute tasks effectively and independently
• Possess good communication and interpersonal skills

Work Location: Jurong East