YR23- Head of Security Operations & Delivery | OSCP/OSCE| Experience in Penetration Testing/Red Teaming

THE SUPREME HR ADVISORY PTE. LTD.; Singapore; On-site; SGD 89,000 - 112,000; Full time

Job summary

The Supreme HR Advisory Pte. Ltd. seeks a senior security leader to spearhead VAPT, SOC, and risk assessments. You will guide the team, introduce AI-assisted workflows, and ensure high-quality delivery across client engagements, while mentoring two junior consultants towards specialized tracks in VAPT/red-team or SOC/GRC.

You will also act as the senior escalation point for complex findings and collaborate with sales on scoping and credibility in client conversations.

Qualifications

• 6–10 years in penetration testing, red teaming or security operations.
• At least 2 years in a technical lead or team-lead capacity.
• OSCP, OSCE or equivalent certification (or strong demonstrable experience).
• Hands-on experience across web, network, cloud pentesting and SOC/SIEM operations.
• Experience using AI/automation tooling in security engagements.

Responsibilities

• Own end-to-end delivery quality for VAPT, SOC/managed detection, and risk assessments — from scoping to final report sign-off.
• Redesign delivery workflows to incorporate AI-assisted reconnaissance, scanning, and alert triage.
• Launch and run a continuous VAPT offering distinct from point-in-time engagements.
• Mentor two junior consultants with specialization tracks (VAPT/red-team or SOC/GRC).
• Serve as the senior technical escalation point for clients and sign-off authority on findings.

Skills

Penetration testing

Red team leadership

Security operations

AI/automation tooling

Business communication

Job description

5 days, Mon - Fri 8.30am to 5.30pm
Salary: $8,000 to $10,000
Location:Kaki Bukit Ave, Singapore

Role Overview

You’ll be the main technical leader for the team. Your role is to step in after the current senior technical leaders leave, improve how the team delivers its work, and introduce more modern, AI-supported ways of doing VAPT and SOC work instead of relying on the same manual methods they’ve used for years. You’ll also be responsible for making sure all client projects are delivered to a high standard and help develop a small team of consultants into technical specialists.

Job scopes:

• Own end-to-end delivery quality for VAPT, SOC/managed detection, and risk assessment engagements — from scoping through final report sign-off.
• Redesign delivery workflows to incorporate AI-assisted reconnaissance, scanning,and alert triage, working closely with the AI Security & Automation Lead — freeing the team to focus on exploitation logic, business-context risk rating, and client communication.
• Launch and run our continuous/subscription-based VAPT offering, distinct from traditional point-in-time engagements.
• Mentor and technically develop 2 junior consultants, giving each a clear
  specialization track (VAPT/red-team or SOC/GRC).
• Act as the senior technical escalation point for clients and act as a technical sign-off authority on all findings before they leave the building.
• Partner with the Director, BD & Client Success on scoping calls and technical credibility during sales conversations.
• Own technical hiring decisions for future delivery-team growth.

Requirements:

• 6–10 years in penetration testing, red teaming, or security operations, with at least 2 years in a technical lead or team-lead capacity.
• Recognized offensive security certification (OSCP, OSCE, or equivalent) or strong demonstrable equivalent experience.
• Hands-on experience across web/network/cloud penetration testing and SOC/SIEM operations.
• Demonstrated (not just theoretical) use of AI/automation tooling in a security engagement.
• Able to translate technical findings into business risk for non-technical stakeholders.