A Lead Consultant provides expert IT security consultancy and advisory services, helping to secure cyber assets, including networks, mobile applications, web applications, and IoT devices. The role involves red teaming, security system configuration, source code review, and penetration testing.
Duties & Responsibilities
- Perform red teaming exercises to simulate real-world adversarial attacks, testing organisational defences, incident response capabilities, and security awareness across people, process, and technology.
- Conduct technical security assessments, including penetration testing, source code review, and security configuration analysis.
Red Teaming & Adversary Simulation
- Design and execute sophisticated red team operations that simulate advanced persistent threats (APTs) and real-world attack scenarios
- Conduct multi-layered security assessments across network, application, cloud, and physical security domains
- Emulate threat actor tactics, techniques, and procedures (TTPs) aligned with frameworks such as MITRE ATT&CK
- Test detection and response capabilities of security operations centres (SOCs) and incident response teams
Penetration Testing
- Perform comprehensive penetration testing across web applications, mobile applications, APIs, network infrastructure, and cloud environments
- Conduct vulnerability assessments using both automated tools and manual testing techniques
- Execute ethical hacking methodologies following industry standards including PTES (Penetration Testing Execution Standard), OWASP, and OSSTMM
- Identify security weaknesses in system configurations, code implementations, and security control
Continuous Improvement
- Stay current with emerging threats, attack vectors, and security trends
- Develop custom tools, scripts, and exploits to enhance testing capabilities
- Mentor junior team members and share knowledge across Team NCS
- Relevant certifications such as OSCP, OSEP, OSWE, CRTO, CRTP or equivalent red teaming credentials is required.
- Relevant experience with cloud security, red team operations, threat intelligence or purple team exercises is an advantage.
We are driven by our AEIOU beliefs—Adventure, Excellence, Integrity, Ownership, and Unity—and we seek individuals who embody these values in both their professional and personal lives. We are committed to our Impact: Valuing our clients, Growing our people, and Creating our future.
Together, we make the extraordinary happen.
Learn more about us at ncs.co and visit our LinkedIn career site.
Scam Alert
We are aware of fraudulent job offers and impersonations of NCS recruiters. Phishing emails using convincing-looking but fake addresses are also commonly used to trick you into thinking that they come from official NCS sources.
Please note that all official communications from NCS Group will only be sent from verified corporate email addresses. Always check that the sender’s email address ends with the genuine NCS domain, @ncs.com.sg/ @ncs.co and beware of extra letters, symbols or misspellings. When in doubt, verify the sender’s identity by contacting us at [email protected].