[Expression of Interest] Penetration Tester / VAPT Consultant

Penetration Tester / VAPT Consultant

Recruit123 is helping our client to hire a Penetration Tester / VAPT Consultant to join their cybersecurity team.

Our client is a Singapore-based organization looking for a skilled Penetration Tester / VAPT Consultant to conduct security assessments and help strengthen the organization's (or its clients') security posture through offensive security testing.

Key Responsibilities:

Conduct vulnerability assessments and penetration testing (VAPT) across web applications, mobile applications, networks, and infrastructure

Identify, exploit, and document security vulnerabilities, providing clear risk ratings and remediation recommendations

Perform manual and automated testing using industry-standard tools and methodologies (OWASP, PTES, NIST)

Prepare detailed technical reports and executive summaries for clients/stakeholders, translating technical findings into business risk language

Support red team engagements, social engineering assessments, or specialized testing (API, cloud, IoT) as required

Stay current with emerging vulnerabilities, exploits, attack techniques, and threat intelligence

Liaise with clients or internal stakeholders to scope engagements, clarify findings, and support remediation validation/retesting

Ensure testing is conducted within agreed rules of engagement and compliance requirements (e.g., MAS TRM for financial clients)

Contribute to the development of internal testing methodologies, tools, and playbooks

Mentor junior team members where applicable

Requirements

Degree/Diploma in Cybersecurity, Computer Science, Information Technology, or related field

Minimum 2–5 years of hands-on experience in penetration testing/VAPT (experience level flexible depending on specific client mandate)

Relevant certifications strongly preferred: OSCP, OSCE, CEH, GPEN, or equivalent

Solid understanding of common vulnerability classes (OWASP Top 10), network protocols, and exploitation techniques

Experience with tools such as Burp Suite, Metasploit, Nmap, Nessus, or similar

Familiarity with scripting/programming (Python, Bash, PowerShell) for tool development or automation an advantage

Strong report-writing skills with ability to communicate technical findings clearly to both technical and non-technical audiences

Willingness to travel for on-site client engagements where required

Prior consultancy experience an advantage but not mandatory

What's on Offer:

Exposure to diverse testing engagements across multiple industries and clients

Certification and training support (e.g., OSCP sponsorship)

Career progression pathway toward senior consultant, red team lead, or security architect roles

Recruit123 Pte Ltd

EA Personnel: Lian Cher Chieh (Steffan)

EA Personnel Registration No.: R1217705

EA License No.: 25C2810EA