Senior Consultant - Singapore - DACTA SG PTE. LTD.

DACTA SG PTE. LTD.

Verified Company

Singapore

2 weeks ago

Posted by:

Wei Jie

beBee Recruiter

Requirements:

Perform thorough source code reviews to identify potential security vulnerabilities and weaknesses.
Conduct host configuration reviews to ensure systems are configured in alignment with industry best practices and security standards.
Lead security audits and assessments to identify security gaps and recommend actionable remediation strategies.
Provide expert security consulting, offering insights and guidance to clients on improving their overall security posture.
Assess risks associated with identified vulnerabilities and prioritize them based on potential impact and likelihood.
Collaborate with crossfunctional teams to develop and implement risk management strategies.
Stay current with the latest security trends, threats, and vulnerabilities to continuously enhance testing methodologies and risk assessment techniques.
Create detailed technical reports and documentation outlining identified vulnerabilities, potential impact, risk assessment findings, and recommended remediation steps.
Participate in client meetings to explain findings, address concerns, and provide recommendations for improving overall security and risk management practices.

Qualifications:

Bachelor's degree in Computer Science, Information Security, or related field (or equivalent work experience).
Industryrecognized certifications such as OSCP, CREST Certified Tester (CCT), or equivalent.
Extensive experience of at least 35 years in performing Vulnerability Assessment and Penetration Testing (VAPT) across diverse environments, from SME to Enterprise.
Proven expertise in conducting source code reviews, host configuration reviews, security audits, consulting assessments, and risk management.
Proficiency in using a variety of security testing tools and frameworks.
Strong understanding of common security vulnerabilities, attack vectors, and mitigation strategies.
Excellent written and verbal communication skills, with the ability to convey complex technical concepts to both technical and nontechnical audiences.
Ability to work independently, manage multiple projects simultaneously, and meet tight deadlines.
Strong problemsolving skills and attention to detail.
A commitment to staying up to date with the evolving cybersecurity landscape.