VAPT Team Lead & Security Testing Expert

ST ENGINEERING INFO-SECURITY PTE. LTD.; Singapore; On-site; SGD 120,000 - 180,000; Full time

Job summary

ST ENGINEERING INFO-SECURITY PTE. LTD. is seeking a seasoned VAPT lead to manage a team of engineers, guide junior staff, and drive security testing across client environments.

You will report on progress, coordinate with stakeholders, and provide SME-level guidance on vulnerability assessment processes and technical challenges. The role requires strong leadership, project execution capabilities, and a proactive approach to staying current with cyber threats and mitigation techniques.

Qualifications

• 5+ years of cybersecurity experience in security testing and reviews.
• 2+ years of leadership experience overseeing a team.
• Familiarity with Mindef-related projects.
• Certifications such as CEH, GPEN, GWAPT, GMOB add advantage.
• Proficient with security tools Burp Suite, Kali Linux, Metasploit, Nessus, Nmap, Wireshark.

Responsibilities

• Lead a team of VAPT engineers and guide juniors.
• Report delivery status of inter-related projects.
• Drive projects with stakeholders to completion.
• Provide guidance as a Security Vulnerability Assessment SME.
• Conduct vulnerability assessments and pentests in customer environments.
• Prepare comprehensive reports and deliver stakeholder presentations.
• Stay updated on emerging cybersecurity threats and vulnerabilities.

Skills

Leadership

Team management

Communication

Stakeholder management

Independent work

Education

CREST CRT (Pen) or OSCP preferred

Tools

Burp Suite

Kali Linux

Metasploit

Nessus

Nmap

Wireshark

Job description

ST ENGINEERING INFO-SECURITY PTE. LTD. is seeking a seasoned VAPT lead to manage a team of engineers, guide junior staff, and drive security testing across client environments.

You will report on progress, coordinate with stakeholders, and provide SME-level guidance on vulnerability assessment processes and technical challenges. The role requires strong leadership, project execution capabilities, and a proactive approach to staying current with cyber threats and mitigation techniques.