Cyber Security Consultant - Singapore - LMA Asia

LMA Asia

Verified Company

Singapore

1 week ago

Posted by:

Wei Jie

beBee Recruiter

Description

Sector:

IT

Contact:
Danielle Tan

Client:

LMA

Location:
Singapore

Salary:
Negotiable

Expiry Date: 29 March 2023

Job Ref:
BBBH414428_

Job Description & Requirements

We are looking for a highly driven and self-motivated Cyber Security Consultant to join our team As a member at our company, you will have the opportunity to work on new and exciting projects and develop your career.

JOB SUMMARY

Hands on Responsibilities:

Support the sales by attending security sales meeting (if necessary), effort estimation and provide security testing project timeline
Develop the security acceptance test plan
Provide expert technical support during the security testing activities
Security test preparation, settingup of testing environment, configuration and installation of the security testing tools
Perform manual or automated security testing using commercial security testing tools
Conduct Greybox Testing (Authenticated) and/or Blackbox Testing (Unauthenticated) Penetration Tests
Conduct Whitebox Testing and
Secure Code Review:
Conduct
Network and
Infrastructure Vulnerability Assessment and
Penetration Testing:
Conduct
Web,
Mobile and
Desktop Application Vulnerability Assessment and
Penetration Testing:
Document and Report the vulnerabilities found in the system
Provide professional recommendations / advice to mitigate and resolve the vulnerabilities
Present the security testing results to the relevant stakeholders
Provide weekly status reporting on the security testing activity progress

Requirements:

Bachelor's degree, preferably in computer science or information systems, or equivalent work experience
Minimum 5 years security experience in a security analyst, engineer, architect, consultant, or a similar role

-
Minimum 3 years' professional experience in conducting vulnerability assessment and penetration testing:

Required Certifications: Any of the followings

o

CREST Registered Penetration Tester (CREST CRT)
o

Offensive Security Certified Professional (OSCP)

Knowledge in conducting security testing with the following guidelines and standards

o

Open Web Application Security Project (OWASP Top 10 Frameworks)
o

Common Vulnerability Scoring System (CVSS)
o

Common Vulnerabilities and Exposures (CVE)
o

Common Weakness Enumeration (CWE) / SANS Top 25 Software Errors

Tools
Proxies, Port Scanners, Vulnerability Scanners, Exploit Frameworks (ex: Burp, Nessus, Nmap, Metasploit)
Strong oral and written communication skills, including a demonstrated ability to prepare quality documentation and presentations for technical and nontechnical audiences