A Lead Consultant provides expert IT security consultancy and advisory services, helping to secure cyber assets, including networks, mobile applications, web applications, and IoT devices. The role involves security system configuration, source code review, and penetration testing.
Duties & Responsibilities
- Conduct technical security assessments, including penetration testing, source code review, and security configuration analysis.
- Utilize industry-recognized processes and tools to identify and assess security vulnerabilities, aligning with strategic, tactical, and operational security objectives.
- Work closely with clients and internal teams to deliver effective security solutions and recommendations.
- Perform compliance audits and system reviews against industry best practices, security policies, and procedural guidelines.
- Clearly articulate security findings through detailed reports and presentations, tailored for both technical and non-technical stakeholders.
- Provide leadership, guidance, and performance management for project team members
- Conduct team reviews and foster continuous improvement through coaching and collaboration
- Promote teamwork, ownership, and communication within project teams
- Experience in penetration testing, source code review, and host security assessments.
- Experience in leading and coaching a team
- Strong technical expertise in security testing methodologies, tools, and frameworks such as Metasploit, Kali Linux, Burp Suite, and Tenable Nessus.
- Proficiency in scripting languages (e.g., Python, Bash, or PowerShell) for security automation and testing.
- Solid understanding of web application technologies, network security principles, and the OSI model (including HTTP, DNS, SSH, FTP, etc.).
- Familiarity with established security testing methodologies, including the OWASP Web Security Testing Guide (OWSTG) and the Penetration Testing Execution Standard (PTES).
- Relevant industry certifications (e.g., OSCP, CREST CRT) is required
- Strong interpersonal and communication skills
- Enthusiastic about continuous learning and professional growth in the cybersecurity field.
We are driven by our AEIOU beliefs—Adventure, Excellence, Integrity, Ownership, and Unity—and we seek individuals who embody these values in both their professional and personal lives. We are committed to our Impact: Valuing our clients, Growing our people, and Creating our future.
Together, we make the extraordinary happen.
Learn more about us at ncs.co and visit our LinkedIn career site.
Scam Alert
We are aware of fraudulent job offers and impersonations of NCS recruiters. Phishing emails using convincing-looking but fake addresses are also commonly used to trick you into thinking that they come from official NCS sources.
Please note that all official communications from NCS Group will only be sent from verified corporate email addresses. Always check that the sender’s email address ends with the genuine NCS domain, @ncs.com.sg and beware of extra letters, symbols or misspellings. When in doubt, verify the sender’s identity by contacting us at reachus@ncs.com.sg.