Offensive Ethical Hacker/ Lead Pen Tester role in Singapore

[SecurityHeadhunter]

Security Consultant (Professional Services) – Based Singapore. Excellent package offered

Responsibilities:

The Security Consultant is primarily responsible for project delivery in vulnerability assessment

and penetration testing. The Consultant is required to interact with the clients both during

presales and post-sales, to ensure that solutions consistently meet customers’ business and

technical requirements, and deliver the expected benefits. Other requirements include:

 To identify published vulnerabilities and perform reviews and assess risks of security

vulnerabilities relevant to the infrastructure, operating platforms, networks, and applications.

 Capture requirements and provide high quality technical consultation. Engaged in client

meetings to discuss technical aspects of the project and make recommendations to enhance

the solution.

 To operate and manage vulnerability management toolkit to detect vulnerabilities and

security risks across the IT assets.

 Work closely with system owners or representatives and technical staff to communicate

security vulnerabilities, drive and track the security remediation progress.

 To provide accurate and timely IT Security Risk Assessment reports.

 To monitor and drive closure of identified risks with owners and custodians.

 To develop, implement and maintain reports and metrics to communicate state of

vulnerabilities in the IT environment.

 Interpret and translate technical and business requirements into cost effective, and reliable

security solutions to meet customers’ needs and achieve high customer satisfaction for the

services rendered.

Requirements:

 At least 5 years’ of relevant working experience in IT Security industry and involved in

Post-sales of medium to large/complex security system.

 Possess at least 4 years of technical experiences in one or more of these domains –

vulnerability management, IT risk management and/or related functions such as IT audit and

IT security management.

 Strong understanding and hands-on experience of the following:

o Security assessment and vulnerability management tool,

o Infrastructure and OS hardening and techniques and OS-level vulnerabilities,

o Networking concepts, and

o Web application platforms vulnerabilities and web security hardening techniques

 Knowledge of information security, IT infrastructure and systems development.

 Able to articulate and communicate security-related concepts to management and technical

line personnel.

 Possess professional security related qualification such as CISSP, CISA, CISM, CRISC,

OSCP etc. is a plus.

 Independent, resourceful and able to learn on his own and on the job.

 Degree in Information System, computer science or equivalent (not compulsory)

 Occasional travel may be required.

Interested applicants should contact scott.burns@fiveasia.com

[Author]

Posts