VAPT Team Lead (DSC/JH)

ST Engineering; Singapore; On-site; SGD 120,000 - 180,000; Full time

Job summary

ST Engineering is seeking a senior VAPT team lead to guide fellow engineers and deliver end-to-end security testing across diverse environments. You will report on project milestones, drive completion with key stakeholders, and serve as a subject-matter expert for vulnerability assessment and security testing.

Responsibilities include performing vulnerability assessments, penetration testing, host configuration reviews, and generating detailed reports with clear recommendations while

Qualifications

• Experience in cyber security assessments and security testing
• Strong leadership and team management skills
• Excellent communication and stakeholder management

Responsibilities

• Lead a team of VAPT engineers and guide junior staff
• Report delivery status for related projects with milestones
• Drive project completion with stakeholders
• Serve as VAPT SME to stakeholders and implementation teams
• Conduct vulnerability assessments and penetration testing across networks, apps, web, mobile, wireless, cloud, and IoT
• Perform host configuration reviews and security analyses
• Prepare comprehensive findings reports and deliver stakeholder presentations
• Stay updated on emerging threats and cyber security practices

Job description

• Lead a team of fellow VAPT engineers and provide guidance to junior VAPT engineers
• Report on the delivery status of a group of inter-related projects, including commercial and implementation milestones
• Drive projects with relevant stakeholders to achieve completion
• Provide guidance to stakeholders and implementation teams as a Security Vulnerability Assessment (SVA) SME both on the process and on any related technical complexities
• Conduct one (or more) of the following in customer environments, either individually or as a team:
• To conduct vulnerability assessment and penetration test on networks, web applications, mobile applications, wireless systems, clouds, IOT
• To perform host configuration review of OS, applications and networks
• To perform security analysis on the vulnerabilities
• To prepare comprehensive reports with document findings
• To deliver presentations to stakeholders
• Keep abreast of new developments, emerging threats and vulnerabilities in cybersecurity practices and technologies.

Requirements

• Experience and familiar with Mindef related projects
• Possess either CREST CRT (Pen) or OSCP is preferred
• Possess one (or more) of the following Security certifications: CEH, GPEN, GWAPT, GMOB would be an added advantage
• Familiar with various tools Burp Suite, Kali Linux, Metasploit, Nessus, Nmap, Wireshark, etc…is an added advantage
• Possess at least 5 years of cyber security experience in security testing, review, including 2 years of leading a team will be preferred
• Possess leadership and team management skills
• Ability to push stakeholders and drive projects to completion
• Ability to collaborate with team members, execute tasks effectively and independently
• Possess good communication and interpersonal skills