Senior Offensive Security Consultant

SeniorOffensive SecurityConsultant

WHO ARE WE

S-RM is a global intelligence and cyber security consultancy. Since 2005 weve helped companies governments and private individuals solve some of their most complex and sensitive challenges.

Our Corporate Intelligence division uses the latest research and intelligence-gathering techniques to investigate how companies and individuals really do business in todays world. We work with some of the most prominent and sophisticated organisations to help them understand partners customers assets and territories across the globe. We also provide specialised investigative support to law firms businesses and individuals in contentious situations such as litigation commercial disputes and internal investigations.

From our offices in London Cape Town New York Washington DC Hong Kong Singapore and Kuala Lumpur we deliver critical insights from every country across the world. Further information about each of our five Corporate Intelligence practice areas can be found on our website: Compliance Due Diligence Deal Advisory Disputes & Investigations and Strategic Intelligence.

THE ROLE

Offensive Security consultants run the delivery of our offensive security services. They help to interpret client challenges innovate solutions and deliver findings.

As an OS consultant you will work across the full spectrum ofourpentestingservices whether point in time or continuous as well asparticipatein larger engagements such as red will helpourclients to build cyber resilience enhance their understanding of the threatlandscapeand become better prepared to face dynamic and evolving security risks.

As a senior consultant you willbe responsible forsupportingcommercialefforts as well as line management and maintenance of standardstoolsand are looking for someone with a strong business acumen and technical background who can help us shape sell and deliver impactful resilience workstreams to our commercialand leadershipaspect of this role will take approximately 40% of your time the rest being focused on delivery.

MAIN DUTIES AND RESPONSIBILITIES

Client Engagement and Account Management

• Engage with clientstounderstandtheircyber securitychallenges

• Translate client challenges into solutions that fitS-RMsOffensive Securityservice offeringand value proposition

• Lead on proposal writing and presentations with anunderstanding of delivery timelinesprojectresourcingrequirementsand pricing

• Contribute to the expansion of client accounts andwinning ofnew business

• Gainanunderstanding ofS-RMstarget sectors and industries

Offensive Security

Penetration testing:

• Externalinfrastructure

• Webapplication

• APIpentesting

• Phishing and spear phishing

• Internalpentesting

• Mobile applicationpentesting(Android and iOS)

• Attack surface scanning and monitoring

• Cloud assessments and configuration reviews

• Hardware Build Reviews

• Support senior team members in the delivery of red team assessments (end to end breaching the perimeter assumed breach bespoke)

• Red teaming

• Support senior team members in the delivery of red team assessments (end to end breaching the perimeter assumed breach bespoke)

Delivery:

• Deliver findings in a range of formats including written reports presentations and verbal briefings

Training:

• Support the development and delivery of cyber security training packages on a range of topics

• Deliver client training on phishing/awareness/general cyber topics.

• Threat Intelligence

• Keep abreast of threat intelligence developments threat actor activity and security industry developments in mitigations and tooling

Mentoring and technical leadership:

• Provideoversite shadowing and knowledge sharing opportunities forpentestingto other team members

• Participate in monthly knowledge sharing sessions

• Gain an understanding of our cyber services outside of offensive security (incident response cyber advisory digital forensics) and support with offensive security skills where

• Identifyand address internal capability gaps with the support of senior team members

WHAT WERE LOOKING FOR

We are looking for an individual who has 8 or more years experience inpentestingand offensive security consulting across multiple areas including:

• Web/API testing

• Internal network and Active Directory

• External infrastructure and VA

• Cloud (AWS/Azure/GCP)

• AI security testing (nice to have)

• Red Team assessments and familiarity with modern detection/evasion techniques (nice to have)

Experience:

• Experience working within security consulting with good client-facing skills including report writingbriefingsand general comms.
• Experience mentoring or line managing more junior members of a team.
  

All candidates must have permission to work in Malaysia by the start of their employment.

OUR BENEFITS

We offer thoughtful balanced rewards and supportto help our people do their best work and live their lives outside it this includes but is not exhaustive of:

• 20 days holidayper year in addition to bank holidays (1 day for every year of service up to a maximum of 25 days in total);
• Hybridworking and flexible working hours;
• EPF (Employees Provident Fund with a contribution rate of 12% employer & 11% employee;
• Life Insurance 4X annual salary.
• Parental Support:
• Fertility treatment leave 5 daysof leave per cycle of treatment per year;
• Maternity leave 26 weeksof full pay followed by 13 weeks of half pay;
• Paternity leave 6 weeksof full pay.
• Various Health and Medical Benefits including:
• Private dental and medical insurance(taxable benefit) for you and your family;
• EAP programmefor you and your immediate family;
• Free access to the world-famous mindfulness app

We nurture a culture of equality diversity and inclusion and we are dedicated to developing a workforce that displays a variety of talents experiences and perspectives.

To apply for this role please submit a PDF version of your cover letter and CV to: Job Application for Senior Offensive Security Consultant at S-RM