Vulnerability Assessment & Penetration Testing Engineer

ALMR BUSINESS CONSULTING GROUP PTE. LTD.; Singapore; On-site; SGD 60,000 - 120,000; Full time

Job summary

ALMR Business Consulting Group PTE. LTD. in Singapore seeks a Vulnerability Assessment & Penetration Testing Engineer to support vulnerability management and security assessment of a private cloud environment.

The role involves hands-on VA, PT, security validation and hardening of VMs, containers, hosts, network segments and Linux/RHEL-based systems. You will execute regular VA across VMs, containers and networks, investigate vulnerabilities, perform manual PT, assess exploitability and

Qualifications

• 3+ years VA/PT experience
• Hands-on VA/PT on Linux/RHEL
• SOC/SIEM experience
• Knowledge of Linux permissions/SELinux/logs
• Experience with VA tools (Nessus/Qualys)

Responsibilities

• Conduct regular and ad-hoc VA across VMs, containers, hosts, networks.
• Investigate vulnerabilities, remove false positives, assess exploitability and impact.
• Perform penetration testing (network, app/API, infrastructure) as applicable.
• Assess RHEL/Linux configurations, services, permissions, logs, SELinux.
• Review logs using systemctl and journalctl and validate security controls.
• Hardening and configuration reviews, remediation verification.
• Track remediation, retesting and vulnerability closure.
• Prepare technical and management vulnerability reports.
• Support vulnerability management with cross-team remediation.

Skills

VA/PT experience

Linux systems

SOC/SIEM experience

Vulnerability assessment tools

Education

Degree/Diploma in Cybersecurity, IT or equivalent

Tools

Tenable Nessus

Qualys

Job description

Job Summary

We are seeking a Vulnerability Assessment & Penetration Testing Engineer to support vulnerability management and security assessment of a private cloud environment. The role involves hands-on vulnerability assessment (VA), penetration testing (PT), security validation and hardening of VMs, containers, hosts, network segments and Linux/RHEL-based systems.

Roles & Responsibilities

• Execute regular and ad-hoc vulnerability assessments across VMs, containers, hosts and network segments.
• Investigate and validate reported vulnerabilities, eliminate false positives, validate exploitability and assess security impact.
• Perform penetration testing and manual validation, including network, application/API and infrastructure testing as applicable.
• Assess RHEL/Linux security configurations, services, packages, permissions, users, file changes and SELinux configurations/events.
• Investigate OS/application logs, services, processes and ports, using tools and commands such as systemctl and journalctl.
• Perform security hardening and configuration reviews and validate security controls.
• Track remediation, perform retesting and verify vulnerability closure.
• Prepare technical and management-level vulnerability assessment and penetration testing reports.
• Support vulnerability management activities and work with relevant teams to drive remediation.

Requirements

Must Have

• Degree/Diploma in Cybersecurity, IT or equivalent.
• Minimum 3 years of relevant experience in VA/PT, vulnerability management or cybersecurity assessment.
• Hands-on experience in VA/PT and Linux/RHEL environments.
• Experience with SOC/SIEM environments.
• Good knowledge of Linux permissions, SELinux, systemctl, journalctl and server/application logs.
• Experience with vulnerability assessment tools such as Tenable/Nessus or Qualys.
• Strong understanding of vulnerability validation, exploitability assessment, security impact and remediation verification.

Certifications

• RHCSA or RHCE.
• CREST penetration-testing certification.
• OSCP or equivalent.
• Security+ / CySA+ is advantageous.