Security Consultant (Offensive Security)

ITSEC Asia is looking for a Cybersecurity Consultant (Offensive Security) to join our growing team.

We are primarily looking for candidates with around 3 years of hands-on penetration-testing

experience, although we also welcome applications from strong junior pentesters and early-career

professionals who can demonstrate solid technical foundations, curiosity and a genuine passion for

ethical hacking.

This role provides exposure to a wide range of security assessments across enterprise, cloud,

government and critical environments. We are particularly interested in people who are keen to

embrace AI, automation and emerging technologies to improve the efficiency, depth and quality of

penetration testing.

About ITSEC Group

ITSEC Group is a cybersecurity organisation operating across the Asia-Pacific region and beyond,

with offices in Singapore, Indonesia, Australia, the UAE and Mauritius.

We provide cybersecurity consulting and security services to clients across government, critical

infrastructure, financial services, telecommunications, healthcare, technology and other industries.

Joining ITSEC provides the opportunity to work across diverse technology environments, complex

security challenges and a broad range of consulting engagements, while developing both your

technical and client-facing capabilities.

Key Responsibilities

• Conduct penetration testing and vulnerability assessments across web applications, APIs, mobile

applications, networks, cloud environments and other technology platforms.

• Support security assessments involving IT, Operational Technology (OT), Internet of Things (IoT)

and other specialised environments.

• Identify, validate and demonstrate security vulnerabilities using appropriate testing methodologies

and techniques.

• Assess the technical and business impact of identified vulnerabilities and attack paths.

• Document testing activities, technical evidence, proof-of-concept results and assessment

conclusions in a clear and defensible manner.

• Prepare professional penetration-testing reports covering findings, risk implications, supporting

evidence and practical remediation recommendations.

• Present technical findings to clients and explain security risks and remediation approaches to both

technical and non-technical stakeholders.

• Conduct remediation verification and retesting to confirm that identified vulnerabilities have been

effectively addressed.

• Explore and responsibly apply AI-assisted security testing, automation, scripting and emerging

technologies to improve research, reconnaissance, analysis, testing and reporting workflows.

• Continuously develop knowledge of emerging vulnerabilities, attack techniques, security tools,

technologies and industry methodologies.

• Contribute to the development of the team's testing methodologies, knowledge base, tooling and

technical capabilities.

What We Are Looking For

• Diploma or degree in Cybersecurity, Information Security, Computer Science, Engineering or a

related discipline.

• Ideally around 3 years of relevant hands-on penetration-testing or offensive-security experience.

• Strong junior candidates with less experience are also encouraged to apply if they can demonstrate

good practical offensive-security skills and a strong willingness to learn.

• CREST Registered Tester (CRT), Offensive Security Certified Professional (OSCP) or a comparable

recognised offensive-security certification is strongly preferred.

• Good practical understanding of penetration-testing methodologies, tools and techniques.

• Hands-on experience in areas such as web application, API, network, Active Directory, mobile or

cloud penetration testing will be advantageous.

• Experience or knowledge in OT, ICS, IoT or critical-infrastructure security testing is highly

advantageous.

• Strong analytical, troubleshooting and problem-solving capabilities.

• Ability to produce clear, accurate and professional technical reports.

• Good communication skills and the ability to explain technical security issues clearly to clients.

• Interest in AI, automation, scripting and emerging offensive-security technologies, together with the

ability to learn and adapt quickly.

• Willingness to take ownership, work collaboratively and continue developing professionally within a

cybersecurity consulting environment.

Singapore Government / Classified Project Experience

Singapore citizens are preferred, particularly candidates who are eligible to support sensitive or

classified Singapore Government engagements.

Previous experience working on Singapore Government, highly classified, critical-infrastructure or

other high-security projects is highly advantageous.

Candidates who are familiar with the security expectations, professional conduct, documentation

discipline and operational constraints associated with sensitive government environments will be

especially relevant to this role.

What You Can Expect

ITSEC provides on-the-job training, technical mentorship and exposure to experienced cybersecurity

professionals to help consultants continue developing their capabilities.

You will have opportunities to:

• Work on diverse and technically challenging penetration-testing engagements.

• Develop deeper expertise across traditional IT, cloud, OT and emerging technology environments.

• Strengthen your consulting, client communication and professional report-writing skills.

• Learn from experienced offensive-security practitioners.

• Experiment responsibly with AI-assisted and automated security-testing approaches.

• Progress technically into specialised offensive-security domains as your experience develops.

If you enjoy understanding how systems can be broken, explaining why it matters, and helping

organisations become more secure, we would be happy to hear from you.

Skills

Methodology, Risk Assessment, Cyber Security, Web Application Security Assessment, Validate Test Methods, IT Security Assessments, Penetration Testing, Operating Systems, Cybersecurity, Consulting, Security Consulting, Systems Design, Vulnerability Assessment, Network Security, Security Analysis, It Systems