Penetration Tester / VAPT Consultant

Recruit123 is helping our client to hire a Penetration Tester / VAPT Consultant to join their cybersecurity team.

Our client is a Singapore-based organization looking for a skilled Penetration Tester / VAPT Consultant to conduct security assessments and help strengthen the organization's (or its clients') security posture through offensive security testing.

Key Responsibilities:

• Conduct vulnerability assessments and penetration testing (VAPT) across web applications, mobile applications, networks, and infrastructure
• Identify, exploit, and document security vulnerabilities, providing clear risk ratings and remediation recommendations
• Perform manual and automated testing using industry-standard tools and methodologies (OWASP, PTES, NIST)
• Prepare detailed technical reports and executive summaries for clients/stakeholders, translating technical findings into business risk language
• Support red team engagements, social engineering assessments, or specialized testing (API, cloud, IoT) as required
• Stay current with emerging vulnerabilities, exploits, attack techniques, and threat intelligence
• Liaise with clients or internal stakeholders to scope engagements, clarify findings, and support remediation validation/retesting
• Ensure testing is conducted within agreed rules of engagement and compliance requirements (e.g., MAS TRM for financial clients)
• Contribute to the development of internal testing methodologies, tools, and playbooks
• Mentor junior team members where applicable

Requirements:

• Degree/Diploma in Cybersecurity, Computer Science, Information Technology, or related field
• Minimum 2–5 years of hands-on experience in penetration testing/VAPT (experience level flexible depending on specific client mandate)
• Relevant certifications strongly preferred: OSCP, OSCE, CEH, GPEN, or equivalent
• Solid understanding of common vulnerability classes (OWASP Top 10), network protocols, and exploitation techniques
• Experience with tools such as Burp Suite, Metasploit, Nmap, Nessus, or similar
• Familiarity with scripting/programming (Python, Bash, PowerShell) for tool development or automation an advantage
• Strong report-writing skills with ability to communicate technical findings clearly to both technical and non-technical audiences
• Willingness to travel for on-site client engagements where required
• Prior consultancy experience an advantage but not mandatory

What's on Offer:

• Exposure to diverse testing engagements across multiple industries and clients
• Certification and training support (e.g., OSCP sponsorship)
• Career progression pathway toward senior consultant, red team lead, or security architect roles

Recruit123 Pte Ltd
EA Personnel: Lian Cher Chieh (Steffan)
EA Personnel Registration No.: R1217705
EA License No.: 25C2810EA