Senior Cybersecurity Engineer (Python/Penetration Testing) - Part-Time

Job Summary:

Our Client’s Information Security is seeking a highly motivated and experienced Penetration Tester to join our team as a contractor, based in Singapore. The successful candidate will be responsible for conducting comprehensive security assessments of our clients' systems, networks, and applications, identifying vulnerabilities, and providing actionable recommendations for remediation. This is a contract position with the potential for extension based on performance and business needs.

Responsibilities:

• Conduct penetration testing and vulnerability assessments on web applications, networks, and infrastructure.
• Identify and exploit security vulnerabilities using a variety of manual and automated techniques.
• Develop and maintain penetration testing methodologies and procedures
• Document findings in clear, concise, and comprehensive reports, including detailed descriptions of vulnerabilities, potential impact, and recommended remediation steps.
• Present findings and recommendations to technical and non-technical audiences.
• Stay up-to-date on the latest security threats, vulnerabilities, and attack techniques.
• Contribute to the development of security tools and scripts to automate testing processes.
• Perform red team exercises to simulate real-world attacks and assess the effectiveness of security controls.
• Adhere to ethical hacking principles and maintain confidentiality of sensitive information.

Required Skills and Experience:

• Minimum of 5+ years of experience in penetration testing and vulnerability assessment.
• Possession of Offensive Security Certified Professional (OSCP) certification is mandatory.
• Deep understanding of common web application vulnerabilities (OWASP Top 10) and exploitation techniques.
• Proficiency in scripting programming such as Python, Bash.
• Experience with penetration testing tools such as Metasploit, Burp Suite, Nmap, and Nessus.
• Solid understanding of networking protocols and security concepts.
• Excellent communication, interpersonal, and presentation skills.
• Ability to work independently and as part of a team.
• Efficient analytical and problem-solving skills.
• Must be based in Singapore and eligible to work as a contractor.

Bonus Points:

• Other relevant security certifications (e.g., CEH, CISSP, GPEN).
• Contributions to the security community (e.g., bug bounty programs, open-source projects).
• Experience with threat modelling