Cybersecurity Consultant / Junior Consultant (Offensive Security)

We are hiring a Junior Cybersecurity Consultant /Cybersecurity Consultant (Offensive Security) to join our team. This opportunity is suitable for fresh graduates and early-career professionals who are passionate about ethical hacking andpenetration testing. Candidates should also be keen to embrace AI, automationand emerging technologies to improve the efficiency and effectiveness ofsecurity assessments. The successful candidate may be appointed as a Junior Consultant or Consultant, depending on experience, certifications anddemonstrated technical capability. Joining ITSEC Group provides exposure to a broad range of consulting projects, diverse technology environments, evolving cyber threatsand established cybersecurity practices. About ITSEC Group ITSEC Group is a leading cybersecurity organisation in the Asia-Pacific region, with offices in Singapore, Indonesia, Australia, UAE and Mauritius. We provide cybersecurity consulting and solutions to clients across a wide range of industries. We provide cybersecurity consulting and solutions to clients across a wide range of industries. Our team collaborates across regional offices to address complex security challenges and evolving cyber threats. Joining ITSEC Groupprovides exposure to wide range of consultancy projects, diverse technology environments and established cybersecurity practices. Key Responsibilities • Conduct penetration testing and vulnerability assessments across web applications, APIs, mobile applications, networks, cloud environments and other technology platforms. • Support security testing of information technology (IT), operational technology (OT) and Internet of Things (IoT) systems. • Identify, validate and assess the technical and business impact of security vulnerabilities. • Document testing procedures, technical evidence and assessment results. • Prepare clear and professional penetration-testing reports covering findings, risk implications and remediation recommendations. • Present findings and provide practical remediation guidance to clients. • Conduct retesting to verify that identified vulnerabilities have been properly remediated. • Explore and responsibly apply AI-assisted tools, automation and emerging technologies to enhance penetration-testing workflows, research, analysis and reporting. • Keep up to date with emerging vulnerabilities, attack techniques, security tools, technologies and industry methodologies. • Work onsite at client premises when required and comply with applicable project security and confidentiality requirements. Qualifications • Diploma or degree in Cybersecurity, Information Security, Computer Science, Engineering or a related discipline. • Fresh graduates and candidates with up to three years of relevant experience are encouraged to apply. • Practical knowledge of penetration-testing methodologies, tools and techniques gained through employment, internships, academic projects, labs, competitions or independent research. • CREST Registered Tester (CRT), Offensive Security Certified Professional (OSCP), or an equivalent practical certification is preferred. • Candidates considered for appointment at the Cybersecurity Consultant level should hold CRT, OSCP or another relevant practical certification acceptable for the projects assigned. • Experience or knowledge in OT, IoT, cloud or AI security testing is highly advantageous. • Strong analytical, problem-solving and technical report-writing skills. • Good communication skills and the ability to explain technical findings clearly to clients. • Interest in responsibly applying AI, automation and emerging technologies to security-assessment activities. • Willingness to take initiative, learn continuously and develop professionally in a consulting environment. • Willingness to work onsite and undergo background screening or security clearance where required. • Applicants of all eligible backgrounds may apply. Singapore citizens will be considered for assignments subject to citizenship or government security-clearance requirements. Comprehensive on-the-job training and mentorship will be provided to help you strengthen your technical expertise, consulting capabilities and professional report-writing skills while gaining practical exposure to AI-assisted and automated security-testing approaches.