Security Managed Services Lead (VAPT)

Key Responsibilities - Lead the planning, execution, and delivery of Vulnerability Assessment and Penetration Testing (VAPT) engagements across network, application, endpoint, cloud, and hybrid environments. - Execute and support advanced red team operations, adversary emulation exercises, and threat simulations to assess the effectiveness of security controls, detection capabilities, and incident response processes. - Partner with client stakeholders and internal teams to define engagement scope, objectives, rules of engagement, and risk priorities. - Identify, validate, and exploit security vulnerabilities using industry-standard methodologies, frameworks, and tools while maintaining high standards of professionalism and ethical conduct. - Analyze threat intelligence, emerging attack techniques, and adversary tactics aligned with frameworks such as MITRE ATT&CK to enhance the effectiveness and relevance of security assessments. - Develop clear, accurate, and executive-ready reports that communicate technical findings, business risks, and prioritized remediation actions. - Mentor junior security practitioners by providing technical guidance, knowledge sharing, and support in offensive security techniques, tooling, and reporting practices. - Contribute to the continuous improvement of VAPT methodologies, red team playbooks, automation capabilities, and service delivery standards to drive operational excellence and client value. Required Qualifications - Bachelor’s degree in Cyber Security, Information Security, Computer Science, Information Technology, or a related discipline. - Proven experience performing penetration testing, vulnerability assessments, and offensive security engagements across enterprise environments. - Strong hands-on experience with application security testing, network penetration testing, cloud security assessments, and exploitation techniques. - Deep understanding of modern attack methodologies, adversary tactics, and security frameworks, including MITRE ATT&CK and OWASP. - Experience creating technical assessment reports and presenting findings to both technical and non-technical stakeholders. - Strong problem-solving, analytical, and communication skills, with the ability to manage multiple priorities in a dynamic environment. - Ability to collaborate effectively across teams and contribute to key security decisions and strategic initiatives. Preferred Qualifications - Industry certifications such as OSCP, OSEP, OSWE, CRTO, CREST, GPEN, GWAPT, GXPN, CISSP, or equivalent. - Experience conducting red team operations, purple team exercises, and threat-led security assessments. - Knowledge of cloud platforms such as Microsoft Azure, AWS, and Google Cloud Platform (GCP). - Experience with security automation, scripting, and offensive security tooling. - Familiarity with Security Operations Center (SOC) processes, threat hunting, and detection engineering.

• Senior Assistant Manager / Manager (Security) (IMH)

  Institute of Mental Health · Singapore, Singapore

• Software Engineering Manager, Cloud and Third-Party Platform Security

  Google · Singapore

• Security Manager, South Asia Pacific

  Singapore

• Manager, Operational Excellence & Quality (Secure Logistic Services)

  Certis · Singapore

• Security & Threat Management Project Intern (Global Security) - 2026 Start (BS/MS)

  TikTok For Business MEA · Singapore, Singapore

• Senior Executive / Assistant Manager (Security) (IMH)

  Institute of Mental Health · Singapore, Singapore