Job Responsibilities

Penetration Testing

• Conduct comprehensive penetration tests on applications, systems and networks to identify security vulnerabilities
• Provide actionable remediation recommendations and track findings through resolution
• Simulate cyberattacks to evaluate defensive measures and improve security posture

Governance, Risk & Verification (GRV) Support

• Assist in risk assessments, security plan development and control gap analysis
• Perform security assessments, including web/application security configurations and firewall rule reviews
• Contribute to the enterprise risk register by identifying and documenting security risks
• Develop, review and maintain cybersecurity policies, standards and procedures
• Evaluate compliance with security frameworks and regulatory requirements

Job Requirements

Education & Certification

• Bachelor's degree/ Diploma in Cyber Security or Information Technology
• Penetration testing certification such as Offensive Security (OSCP, OSWE, OSEP) or Crest (CRT, CCT)
• Professional cyber related membership and certification

Experience

• Possess at least 2 years of relevant penetration testing hands-on experience
• Prior experience in Gaming, Banking or Critical infrastructure infoComm industry will be an added advantage

Competencies

• Strong knowledge of web & mobile application security and penetration testing techniques
• Strong knowledge of network protocols, security architecture and defense-in-depth principles
• Strong knowledge of Cyber threats, vulnerabilities and attack methodologies
• Strong knowledge of system/application security risk and mitigation strategies
• Proficient in Penetration testing tools
• Proficiency in Security Frameworks
• Excellent verbal/written communication skills to convey technical findings
• Ability to prioritize and manage multiple projects in a dynamic environment
• Strong analytical and problem-solving skills