Security Engineer- Pentesting (Contract)

Opportunity Highlights * Involvement in diverse security testing projects across both public and private sector clients, offering exposure to varied environments and compliance standards. * A strong learning opportunity to build hands-on experience across multiple security domains. * Potential for conversion from contract role to a permanent role, with clear pathways for career development and growth.

Responsibilities

• Conduct Vulnerability Assessments (VA), Penetration Testing (PT) and Red Teaming across various technologies but not limited to networks, web, mobile, thick client applications, cloud environments (AWS, Azure, GCP, alicloud), kubernetes and operational technology (OT)
• Enhance internal VAPT and red team capabilities by developing scripts, automating processes and researching the latest exploitation Tactics, Techniques and Procedures (TTPs) used by threat actors.
• Provide technical support to the pre-sales team and ensure clear communication of complex client requirements.
• Lead and mentor a team of consultants, ensuring effective communication of vulnerabilities and remediation recommendations to clients. Foster a culture of innovation, continuous improvement and knowledge sharing within the team.

Qualifications/Skills required:

• At least 5 years of consulting experience
• Proficient with security testing tools such as Nessus, Burp Suite, Frida, dex2jar, etc.
• Offensive Cyber Security Certifications (e.g. OSCP, CRT preferred)
• Experience in mobile application security testing (Android/iOS).
• Familiarity with cyber security principles (e.g. networking, web development, vulnerability classes) and industry best practices (e.g. OWASP Top 10, MITRE ATT&CK Framework and Cybersecurity Code of Practice (CCOP))
• Familiarity with red teaming tools such as Cobalt Strike, GoPhish, Sliver etc.
• Expertise in source code review using automated scanners such as Checkmar
• Experience working in diverse security testing environments, including using jump hosts, VPNs, testing in GCC AWS/Azure, and both onsite and remote setups.

Do note that we will only be in touch if your application is shortlisted.
Robert Walters (Singapore) Pte Ltd
ROC No.: 199706961E | EA Licence No.: 03C5451
EA Registration No.: R1769100 Jacqueline Chaw Ei Phyu Phyu