Cybersecurity Consultant

Location: Singapore, Singapore Thales is a global technology leader trusted by governments, institutions, and enterprises to tackle their most demanding challenges. From quantum applications and artificial intelligence to cybersecurity and 6G innovation, our solutions empower critical decisions rooted in human intelligence. Operating at the forefront of aerospace and space, cybersecurity and digital identity, we’re driven by a mission to build a future we can all trust. In Singapore, Thales has been a trusted partner since 1973, originally focused on aerospace activities in the Asia-Pacific region. With 2,000 employees across three local sites, we deliver cutting-edge solutions across aerospace (including air traffic management), defence and security, and digital identity and cybersecurity sectors. Together, we’re shaping the future by enabling customers to make pivotal decisions that safeguard communities and power progress. JOB OBJECTIVE CPS Asia provides a range of cybersecurity services and solutions to our regional clients with a strong focus for national critical infrastructure. We are seeking a Cybersecurity Consultant to join our team and work with our clients in the region. The ideal candidate should have good experience in IT systems and architecture. The candidate must be able to identify and mitigate potential cyber risks and threats. The role will require someone that this is a problem solver, determined and enthusiastic. They will bring experience of implementing a wide variety of cybersecurity products and solutions within large complex system development. They will have the ability to apply cybersecurity and principles to organisational requirements and be able to identify and remediate critical infrastructure systems that were designed without system security considerations. The successful candidate will enjoy a rewarding role full of new challenges and be part of a company that provides highly complex solutions in the most critical operational environments where robust safety and resilience standards are applied. ROLES & RESPONSIBILITIES • Conduct security assessments of clients' IT environment to identify vulnerabilities and risks. • Conduct requirement gathering sessions • Conduct host configuration reviews (HCR) to assess hardening compliance on different types of assets • Conduct vulnerability assessments, penetration tests on different types of assets • Act as Subject Matter Expert to provide offensive consultation to ensure successful project delivery. • Clearly articulate security findings through detailed reports and presentations tailored for both technical and non-technical stakeholders. • Work with clients to implement security controls and measures to reduce the risk of cyber-attacks. • Provide technical guidance and support to clients' IT teams on cybersecurity best practices. • Work with the clients' IT teams to integrate systems with enterprise-level cybersecurity measures and solutions. • Keep up to date with emerging cyber threats and trends in the cybersecurity industry. • Provide recommendations on cybersecurity policies and procedures for clients. REQUIREMENTS • Familiar with established hardening benchmark and security testing methodologies. • Familiar with offensive security tools and operating systems (e.g. Kali Linux, Parrot OS, BurpSuite, Nessus, etc.) • Basic scripting knowledge for offensive security. • Willing to travel to client location (locally/overseas) for project delivery • Willing to conduct delivery work during engineering hours (10pm-5am) when required. • Committed to continuous self-directed learning in offensive security domain and obtaining necessary certifications where required. • Knowledge of cybersecurity standards and frameworks, such as IM(ICT&SS), CCoP and NIST. • Strong analytical and problem-solving skills. • Excellent written and verbal communication skills. • Ability to work independently and as part of a team. • Willingness to travel to client sites as required. • Preferred experience working in the Aviation, Transportation, Defense, Public Security and/or Energy sectors. QUALIFICATION, CERTIFICATION & EDUCATIONAL REQUIREMENTS • Diplomas or Bachelor's in Computer Science, Cybersecurity, or a related field. The below certifications will be advantageous • Candidates with OSCP+ and/or CREST CRT are highly advantageous • Candidates without required certification but have relevant experience may apply. At Thales, we’re committed to fostering a workplace where respect, trust, collaboration, and passion drive everything we do. Here, you’ll feel empowered to bring your best self, thrive in a supportive culture, and love the work you do. Join us, and be part of a team reimagining technology to create solutions that truly make a difference – for a safer, greener, and more inclusive world.