Job Responsibilities
Penetration Testing
- Conduct comprehensive penetration tests on applications, systems and networks to identify security vulnerabilities
- Provide actionable remediation recommendations and track findings through resolution
- Simulate cyberattacks to evaluate defensive measures and improve security posture
Governance, Risk & Verification (GRV) Support
- Assist in risk assessments, security plan development and control gap analysis
- Perform security assessments, including web/application security configurations and firewall rule reviews
- Contribute to the enterprise risk register by identifying and documenting security risks
- Develop, review and maintain cybersecurity policies, standards and procedures
- Evaluate compliance with security frameworks and regulatory requirements
Job Requirements
Education & Certification
- Bachelor's degree/ Diploma in Cyber Security or Information Technology
- Penetration testing certification such as Offensive Security (OSCP, OSWE, OSEP) or Crest (CRT, CCT)
- Professional cyber related membership and certification
Experience
- Possess at least 2 years of relevant penetration testing hands-on experience
- Prior experience in Gaming, Banking or Critical infrastructure infoComm industry will be an added advantage
Competencies
- Strong knowledge of web & mobile application security and penetration testing techniques
- Strong knowledge of network protocols, security architecture and defense-in-depth principles
- Strong knowledge of Cyber threats, vulnerabilities and attack methodologies
- Strong knowledge of system/application security risk and mitigation strategies
- Proficient in Penetration testing tools
- Proficiency in Security Frameworks
- Excellent verbal/written communication skills to convey technical findings
- Ability to prioritize and manage multiple projects in a dynamic environment
- Strong analytical and problem-solving skills
