Total 4 job vacancies by Privasec Pte. Ltd.

*This role requires a security clearance. Eligible individuals will be prioritised.

Our Red Team Offensive Security Consultants work with organisations and technical teams to perform a variety of assessments and provide practical advice to keep them secure. Red team members are generally familiar with and apply themselves to most aspects of cybersecurity but specialize in web application security, code reviews, architecture design, network security, attack simulations or even specialist fields such as mainframe or SCADA systems. They help to ensure cybersecurity issues and identified along with their associated risks, and guide organisations to manage this risk in a practical manner.

You will be:

• Serve as an engagement manager, subject matter expert and team lead for the team and our engagements.
• Mentoring junior consultants and peers to become the subject matter experts – just like yourself;
• Designing solutions to customers problems and helping them to choose Privasec;
• Being an ambassador for your area or expertise, the profession and Privasec; and
• Taking ownership and accountability for engagements you manage.

In addition to offering great career growth opportunities, the position offers benefits such as training and certification opportunities, flexible working arrangement, a good working culture and the opportunity to become a well-rounded manager whilst working with a team of like-minded, friendly people.

The responsibilities of the Senior Consultant include :

• Manage the RED team members to ensure the performance and happiness of your unit with a collaborative, open and professional culture;
• Act as the engagement manager for several concurrent RED engagements (ensure the quality, suitability and timeliness of engagements and provide the first point of escalation for project issues);
• Manage staff and keep a collaborative, open and professional culture;
• Provide mentorship and support to peers and subordinates and help in their professional growth (technical and consulting);
• Deliver individual engagements yourself to maintain your skills set and consciously acquire new competences though formal training and self-development;
• Pass certifications as required to maintain your status as an expert in your field (in addition to blog post, training, CTFs and presentations);
• Help improve internal processes, building towards efficient and standardised delivery for Privasec services;
• Lead the recruitment of local technical resources;
• Attend industry events regularly to learn, earmark potential recruits, network and identify opportunities;
• Support commercial opportunities when relevant; and
• Lead the execution of the OFFSEC strategy, working closely with the senior management.

Experience and Certification

• 4- 8 years of client facing consulting experience
• Must have - OSCP and CREST CRT
• Nice to have: OSCE or CREST CCT or other specialist certifications
  Can we maybe consolidate it to be.

*This role requires a security clearance. Eligible individuals will be prioritised.

The Role:

Our Red Team, Offensive Security Associate Analysts & Analysts work with organisations and technical teams to perform a variety of assessments and provide practical advice to keep them secure. Red team members are generally familiar with and apply themselves to most aspects of cybersecurity but specialize in penetration testing for web applications, mobile applications and APIs.

They help to ensure cybersecurity issues are identified along with their associated risks, and guide organisations to manage this risk in a practical manner.

This role will also be responsible for guiding junior talent to become cybersecurity experts as well.

You will be:

· Taking up the role of an Engagement Lead on projects, as an individual contributor, working with your team to complete projects;

· Conducting various security assessments for various technology types and environments, with a focus on penetration testing; and

· Coordinate with clients and other subject matter experts in different fields, as required in projects.

A suitable candidate would have some or most of the following attributes:

· 1 or more years of experience in offensive security or a technical security field.

· Preferred Certifications: OSCP and CREST CRT

· Demonstrate deep understanding of penetration-testing methodologies, techniques, and remediation.

· Understand technology systems and be able to identify and describe vulnerabilities in web apps/web APIs, network systems, and within code;

· Familiar with threats in the different environments, from cloud to endpoints or IoT systems to perform review of hardening controls for such systems; and

· Reactive and adaptable to new threats and technologies as they evolve.

Experience and Certification

· 1-3 years of experience in offensive security or a technical security field.

· Preferred Certifications: OSCP and CREST CRT, technology depth certifications

The Mission:

Protect and enable growth of value creators, through excellence and integrity.

To be the first choice for visionary organisations and talents, and to turn every client into a client for life.

We are passionate about providing opportunities to our team members to be the best version of themselves and building partnerships with our clients to ensure cybersecurity empowers them towards their business goals.

The Team:

Our team is made up of Information Security professionals coming from all types of professional and personal backgrounds - we have a unique, international environment and believe in having fun at work. We offer benefits to help you in your career progression and also provide training and certification opportunities, flexible hours, a great workplace environment, a culture focused on helping you become a well rounded consultant while working in a technically strong, diverse team.

About Privasec

Privasec is an independent cybersecurity consulting firm and we have been operating for more than 7 years. We have offices located in Singapore and Malaysia, as well as in 6 different cities in Australia.

We offer Cybersecurity services ranging from Offensive Security to Strategy, Governance, Risk and Compliance services, including ISO27001 implementation and adoption of other International Standards for our clients. We are ISO27001 certified, CREST Accredited and a PCI QSA company.

Our team is made up of Information Security professionals coming from all types of professional and personal backgrounds - we have a really unique, international environment to grow in. We believe in having fun at work - we are really friendly as well!

We offer benefits to help you in your career progression and in addition, we have training and certification opportunities, flexible hours, a great workplace environment, a culture focused on helping you become a T-shaped consultant while working in a technically strong, diverse team.

Our Strategy, Governance, Risk and Compliance Consultants work with key stakeholders to drive the design, development and implementation of strategies, policies and standards around cybersecurity. They help to ensure cybersecurity is aligned and supports the business objectives of the organisation.

You will be:

• Conducting cybersecurity assessments to various industry and global standards
• Developing cybersecurity roadmaps
• Providing risk identification and analysis
• Presenting and reporting on cybersecurity items to key organisational stakeholders
• And in some cases, managing cybersecurity for the organisation.

A suitable candidate would have some or most of the following attributes:

• Is able to hit the ground running on Cyber Governance, Risk Compliance
• Expertise in ICT security principles and controls
• Good with both business and technology stakeholders. Comfortable to report and present to both customer-facing and internal management.
• As the role requires working with mid-market to enterprise level clients, including government clients, you should have a clear understand of their requirements.
• Adept at handling both short and long term projects - including conducting cybersecurity assessments to comply with local / global standards in privacy regulations
• An excellent communicator, with strong presentation and writing skills
• Understanding of ISO 27001 / 27002, NIST CSF, and relevant standards / regulations that impact cybersecurity
• Approximately 4 - 8 years experience in Cyber Governance, Risk and Compliance
• Good to have : Cyber security certifications
• Good to have : Experience with security architecture design & review

What's in it for you?

• Work in a dynamic and modern company with a great culture and great people
• Increased responsibilities in a client-facing role to boost your career. We will support you in this with senior consultants, but give you space to grow.
• Get exposure to a wide range of businesses across all industries
• Grow your skillset across the entire engagement lifecycle
• Flexible work arrangements when practical
• Training and certification opportunities
• Support for your charitable or technical causes you may lead outside or work.
• Opportunities to travel - if that motivates you!

About Privasec

Privasec is an independent cyber security consulting firm and we have been operating for more than 6 years. We have offices located in 6 different cities in Australia, with a growing presence in South East Asia.

We offer Cybersecurity services ranging from Offensive Security to Strategy, Governance, Risk and Compliance services, including ISO27001 implementation and adoption of other International Standards for our clients. We are ISO27001 certified, CREST Accredited and a PCI QSA company. We are a registered Services supplier for both the Singapore Government as well as the Australian Government.

Our team is made up of Information Security professionals coming from all types of professional and personal backgrounds - we have a really unique, international environment to grow in. We believe in having fun at work - we are really friendly as well!

We offer benefits to help you in your career progression and in addition, we have training and certification opportunities, flexible hours, a great workplace environment, a culture focused on helping you become a T-shaped consultant while working in a technically strong, diverse team.

Our Strategy, Governance, Risk and Compliance Consultants work with key stakeholders to drive the design, development and implementation of strategies, policies and standards around cybersecurity. They help to ensure cybersecurity is aligned and supports the business objectives of the organisation.

You will be:

• Conducting cybersecurity assessments to various industry and global standards
• Developing cybersecurity roadmaps
• Providing risk identification and analysis
• Presenting and reporting on cybersecurity items to key organisational stakeholders
• And in some cases, managing cybersecurity for the organisation.

A suitable candidate would have some or most of the following attributes:

• Expertise in ICT security principles and controls
• Good with both business and technology stakeholders. Comfortable to report and present to both customer-facing and internal management.
• As the role requires working with mid-market to enterprise level clients, including government clients, you should have a clear understand of their requirements.
• Adept at handling both short and long term projects - including conducting cybersecurity assessments to comply with local / global standards in privacy regulations
• An excellent communicator, with strong presentation and writing skills
• Understanding of ISO 27001 / 27002, NIST CSF, and relevant standards / regulations that impact cybersecurity
• Good to have : Approximately 3 - 8 years experience
• Good to have : Cyber security certifications
• Good to have : Experience with security architecture design & review

What's in it for you?

• Work in a dynamic and modern company with a great culture and great people
• Increased responsibilities in a client-facing role to boost your career. We will support you in this with senior consultants, but give you space to grow.
• Get exposure to a wide range of businesses across all industries
• Grow your skillset across the entire engagement lifecycle
• Flexible work arrangements when practical
• Training and certification opportunities
• Support for your charitable or technical causes you may lead outside or work.
• Opportunities to travel - if that motivates you!

About Privasec

Privasec is an independent cyber security consulting firm and we have been operating for more than 6 years. We have offices located in 6 different cities in Australia, with a growing presence in South East Asia.

We offer Cybersecurity services ranging from Offensive Security to Strategy, Governance, Risk and Compliance services, including ISO27001 implementation and adoption of other International Standards for our clients. We are ISO27001 certified, CREST Accredited and a PCI QSA company. We are a registered Services supplier for both the Singapore Government as well as the Australian Government.