Total 28 pr consultant job vacancies in Legal / Public / Security category in Singapore

We are looking for a confident, client-facing Cyber Security Consultant for our client to join their growing cybersecurity team. Reporting directly to the CEO, you will play a key role in securing cloud environments, strengthening cybersecurity governance, and partnering with both technical and business stakeholders to deliver secure, compliant solutions.

Key Responsibilities

• Design, implement, and enhance secure cloud architectures across Microsoft Azure, Entra ID, and Microsoft 365 (AWS experience is a plus).
• Drive cybersecurity governance, risk, and compliance, maintaining and improving security frameworks including ISO 27001, NIST, and SOC 2.
• Lead proactive threat management through vulnerability assessments, penetration testing, security monitoring, and continuous security improvements to strengthen the organisation's security posture.
• Monitor, maintain, and optimise cloud infrastructure to ensure high availability, performance, and security.
• Serve as the cybersecurity subject matter expert for client engagements, supporting pre-sales activities, technical presentations, and cybersecurity discussions.
• Respond to cybersecurity requirements in RFPs, audits, and customer security questionnaires.
• Collaborate with cross-functional teams to plan, implement, and continuously improve cybersecurity controls, policies, and standards.

Requirements

• 8–10 years of experience in cybersecurity, cloud security, or IT security operations.
• Strong hands-on expertise with Microsoft Azure, Entra ID, and Microsoft 365 security.
• Proven experience designing and securing Azure cloud environments.
• Experience implementing or maintaining compliance with ISO 27001, NIST, SOC 2, or similar security frameworks.
• Hands-on experience in vulnerability assessments (VA), penetration testing (VAPT), security monitoring, and incident prevention.
• Experience supporting pre-sales, customer presentations, and cybersecurity responses for RFPs.
• Excellent communication and stakeholder management skills, with the confidence to engage both technical teams and senior business leaders.
• AWS cloud security knowledge is advantageous.

To Apply or find out more information on this role, please email us or send your updated resume to: lynn.tay@starcareerconsulting.com

Lynn Tay (Reg. No. R1876711)
STAR CAREER CONSULTING PTE LTD
(EA License: 20C0353)

We are looking for a highly driven and self-motivated Cyber Security Consultant to join our team! As a member at our company, you will have the opportunity to work on new and exciting projects and develop your career.

JOB SUMMARY

You will participate in a variety of engagements, focusing on targets that may include network equipment, servers, applications, APIs, wireless infrastructures, mobile devices, and other information systems. Using a variety of tools and techniques that may include red teaming, you will have the opportunity to combine technical expertise with your imagination to discover innovative methods with the goal of ensuring customers remain one step ahead of its adversaries.

Hands on Responsibilities:

• Support the sales by attending security sales meeting (if necessary), effort estimation and provide security testing project timeline
• Develop the security acceptance test plan
• Provide expert technical support during the security testing activities
• Security test preparation, setting-up of testing environment, configuration and installation of the security testing tools
• Perform manual or automated security testing using commercial security testing tools
• Conduct Greybox Testing (Authenticated) and/or Blackbox Testing (Unauthenticated) Penetration Tests on network
• Conduct Whitebox Testing and Secure Code Review
• Conduct Network and Infrastructure Vulnerability Assessment and Penetration Testing
• Conduct Web, Mobile and Desktop Application Vulnerability Assessment and Penetration Testing
• Find and pinpoint the vulnerabilities of the assess target system / application
• Document and Report the vulnerabilities found in the system
• Provide professional recommendations / advice to mitigate and resolve the vulnerabilities
• Present the security testing results to the relevant stakeholders
• Provide weekly status reporting on the security testing activity progress

Requirements:

• Bachelor's degree, preferably in computer science or information systems, or equivalent work experience
• Minimum 3 - 5 years security experience in a security analyst, engineer, architect, consultant, or a similar role
• Minimum 3 years’ professional experience in conducting vulnerability assessment and penetration testing
• Required Certifications: Any of the followings:

1. CREST Registered Penetration Tester (CREST CRT)
2. CREST Practitioner Security Analyst
3. Offensive Security Certified Professional (OSCP)

• Knowledge in conducting security testing with the following guidelines and standards
• Experience in configering and setting of Sona Cube offline.
• High proficiency in manual and automated techniques for penetration testing (network equipment, servers, web applications, APIs, wireless, mobile, databases, and other information systems), as well as executing vulnerability assessments (injection, privilege escalation, fuzzing, buffer overflows, etc.)
• Tools – Proxies, Port Scanners, Vulnerability Scanners, Exploit Frameworks (ex: Burp, Nessus, Nmap, Metasploit)
• Experience/Knowledge in Semgreb will be advantage

Role Purpose:

The Security Consultant delivers penetration testing & offensive security projects to ensure a successful

outcome that at least meets or exceeds the expectations of our clients.

Role Outcomes:

• The customer recognises you as a subject matter expert and they have confidence in the comprehensiveness of the testing methodology and the accuracy of the results.
• The client has prepared the testing environment prior to the project start date so that the engagement is executed smoothly and without delay.
• Penetration testing projects are delivered efficiently and on schedule.
• The quality of the Penetration Testing Report by ensuring it has been peer reviewed and approved for release to the client.
• All client data is managed in strict accordance with Vantage Point Security data security and protection policies throughout the project.

Location:

Singapore

Role Purpose:

We are seeking an accomplished and proactive Senior Penetration Tester to lead our offensive security and penetration testing projects.

The successful candidate will possess extensive practical experience, hold multiple industry-recognised certifications, and demonstrate strong leadership qualities.

You will be expected to manage concurrent projects, mentor junior team members, and ensure that all engagements meet or exceed our clients’ expectations.

Key Responsibilities:

Technical Leadership:

• Act as the primary technical authority for both internal teams and client engagements.
• Provide strategic guidance and mentorship to ensure comprehensive coverage of testing scenarios.

Project Management:

• Collaborate with Project Managers to define project scope, develop detailed Statements of Work (SOW), and allocate testing resources.
• Oversee the scheduling and execution of penetration testing projects, ensuring milestones are met and delays minimised.

Penetration Testing:

• Conduct thorough manual and automated penetration tests across web applications, networks, infrastructure, IoT devices, mobile applications, thick clients and emerging technologies.
• Develop, update, and author new test cases to address evolving security threats and technological advancements.

Reporting and Communication:

• Document findings, vulnerabilities, and recommendations in detailed and accurate reports.
• Ensure all reports undergo peer review and receive appropriate approval before delivery to clients.
• Maintain clear and open communication channels with clients regarding testing methodologies, project progress, and remediation advice.

Compliance and Data Security:

• Manage client data in strict accordance with our data security and protection policies.
• Ensure that all engagements adhere to legal, regulatory, and industry-specific requirements.

Desired Outcomes:

Expertise Recognition:

Clients recognise you as a subject matter expert with confidence in the rigour and accuracy of our penetration testing approach.

Efficient Project Delivery:

Projects are delivered on schedule, with clearly defined scopes and communicated timelines.

High-Quality Reporting:

Penetration testing reports are comprehensive, thoroughly documented, and approved for client distribution.

Team Development:

Junior team members are well-prepared and continuously upskilled, contributing to a high-performing security team.

Qualifications and Experience:

Essential Experience:

• A robust track record in delivering complex penetration testing and offensive security projects.
• Extensive hands-on experience in manual testing across diverse environments including web, network, IoT, and mobile platforms.

Certifications:

• Multiple relevant penetration testing certifications are required (e.g., CREST, OSCP, OSWE, GPEN, etc.).
• Maintaining current certifications and an ongoing commitment to professional development is essential.

Leadership and Multitasking:

• Demonstrated leadership skills with the ability to manage and mentor a diverse team.
• Proven ability to manage multiple projects simultaneously while ensuring attention to detail and quality.

Communication Skills:

• Excellent written and verbal communication skills in English, with the ability to clearly articulate complex technical information to non-technical stakeholders.

Important Application Note:

Please note that only candidates who meet the above criteria, particularly in terms of multiple industry-relevant certifications and extensive hands-on experience, will be considered for this role.

Applications from those who do not satisfy these essential requirements will not be reviewed.

Additional Information:

• Occasional travel to client sites may be required.
• We offer a competitive salary and benefits package reflective of the seniority and expertise required for this role.

If you are a seasoned professional with a passion for offensive security and a proven track record in penetration testing leadership, we encourage you to apply.

Role Purpose:

The Associate Security Consultant attains CREST CRT certification, learns other security assurance skills and assists in delivering penetration testing & offensive security projects to ensure a successful outcome that at least meets or exceeds the expectations of our clients.

Role Outcomes:

• Mentored to achieved CREST CRT certification within 4 months of joining Vantage Point.
• Complete the Associate Consultant training program to become competent with the use of penetration testing tools and techniques, including manual testing, automated application vulnerability scanning/testing tools and source code review techniques.
• Perform penetration testing projects as part of a team to ensure they are delivered efficiently and on schedule.
• All client data is managed in strict accordance with Vantage Point Security data security and protection policies throughout the project.

Role Responsibilities:

• Achieve CREST CRT certification within 4 months of joining Vantage Point.
• Complete the Associate Consultant training program comprising the learning of penetration testing tools and techniques, including manual testing, automated application vulnerability scanning/testing tools and source code review techniques.
• Support Senior Consultants and Security Consultants to perform manual penetration tests of websites, services, infrastructure, networks, IoT Devices, and mobile applications to discover and report exploitable vulnerabilities.
• Clearly document findings and recommendations.
• Help to provide an environment where everybody is continuing to learn and develop.
• Continuously learn and master new hacking methods in new and emerging technologies.

Joining Arup

Arup’s purpose, shared values and collaborative approach has set us apart for over 75 years, guiding how we shape a better world.

Arup’s South-East Asia Resilience, Security & Risk Security Technology Team is focused on delivering technically outstanding, integrated security solutions across a diverse and growing regional market. We are continuously strengthening our capability, creating an environment where top talent can thrive, innovate, and grow. With a strong pipeline of prestigious projects, we are seeking motivated team players eager to contribute expertise and deliver world-class outcomes for leading clients.

The Opportunity

·       Lead and manage the full lifecycle of integrated electronic security system projects, from client requirements through to design, construction, and operational support

·       Develop and deliver high-quality designs including concept plans, schematics, detailed documentation, and technical specifications

·       Collaborate with internal teams and external clients to understand needs and deliver tailored, high-performing solutions

·       Apply technical expertise across systems such as CCTV, access control, intrusion detection, and integrated security infrastructure

·       Support project delivery through proactive problem-solving, coordination, and occasional regional travel

At Arup, you belong to an extraordinary collective – in which we encourage individuality to thrive. Our strength comes from how we respect, share and connect our diverse experiences, perspectives and ideas.

You will have the opportunity do socially useful work that has meaning – to Arup, to your career, to our members and to the clients and communities we serve. 

Is this role right for you?

·       Relevant qualification in Security, Electronics, Computer Science, or a related field, with industry experience in electronic security systems

·       Strong technical knowledge of integrated security technologies and supporting infrastructure (networking, electrical, systems integration

·       Proficiency in tools such as AutoCAD, Revit, and Microsoft Office, with the ability to produce clear, professional documentation

·       Excellent communication and stakeholder engagement skills, with a proactive and collaborative mindset

·       Proven ability to contribute to complex projects, with a commitment to continuous learning, ownership, and professional growth

What we offer you

At Arup, we care about each member’s success, so we can grow together.

Guided by our values, we provide an attractive total reward package that recognises the contribution of each of our members to our shared success. As well as competitive, fair, and equitable pay, we offer a career in which all of our members can belong, grow and thrive – through benefits that support health and wellbeing, a wide range of learning opportunities and many possibilities to have an impact through the work they do.

We are owned in trust on behalf of our members, giving us the freedom, with personal responsibility, to set our own direction and choose work that aligns with our purpose and adds to Arup’s legacy. Our members collaborate on ambitious projects to deliver remarkable outcomes for our clients and communities. Profit Share is a key part of our reward, enabling eligible members to share in the results of our collective efforts.

Please see a list of Arup’s Singapore benefits below:

·       Hybrid working policy & flexible working hours

·       13th month bonus

·       Birthday leave

·       Paid parental leave for birth mothers 16 weeks & new parents (excluding birth mothers) 4 weeks

·       Purchase Additional leave of up to 20 days (permanent employees)

·       Paid Annual subscription to relevant Professional association.

·       Reimbursement of Professional Engineers application and examination Fees

·       International mobility opportunities

·       QP allowance

·       Site Allowance

·       Work related travel insurance

·       Dental expense cover

·       Marriage leave (3 days)

·       Examination leave (2 days)

·       Family care leave

·       Bike Loans of up to SGD2000

Different people, shared values

Arup is an equal opportunity employer that actively promotes and nurtures a diverse and inclusive workforce. We are an open environment that embraces diverse experiences, perspectives, and ideas – this drives our excellence.

Guided by our values and alignment with the UN Sustainable Development Goals, we create and contribute to equitable spaces and systems, while cultivating a sense of belonging for all. Arup provide an environment where you will make a positive difference. Discover more about life at Arup at www.arup.com/careers/your-life-at-arup.

We are committed to making our recruitment process and workplaces accessible to all candidates. Please let us know if you need any assistance or reasonable adjustments throughout your application or interview process, and/or to perform the essential functions of the role. We will do everything we can to support you.

Our Application Process

Please apply directly through our applicant tracking system. Shortlisted candidates will be contacted by Talent Acquisition to discuss next steps. Stay safe online – Arup will never ask for your bank details as part of our recruitment process.

Arup does not accept unsolicited resumes from recruiters or employment agencies.

Joining Arup

Arup’s purpose, shared values and collaborative approach has set us apart for over 75 years, guiding how we shape a better world.

The focus of this role is to provide technical leadership and oversee project delivery across major projects, with a strong focus on Security-by-Design (SBD) engagements throughout the full project lifecycle. This role requires an individual who can operate independently, lead client engagements, and support both strategic advisory and delivery execution across security risk and planning scopes. As part of Arup’s South-East Asia Resilience, Security & Risk Team, you will contribute to delivering technically outstanding security solutions across a diverse range of sectors throughout the region.

The Opportunity

·       Lead and manage the full lifecycle delivery of Security-by-Design projects, including risk assessments, concept and detailed design, tender support, construction administration, and operational planning.

·       Provide technical leadership across security risk and strategy disciplines, including physical security, security planning, risk management, and integrated security solutions within the built environment.

·       Apply strong knowledge of risk management frameworks and industry standards, including ISO 31000, FEMA 452, Bowtie Method, and relevant international best practices.

·       Prepare and review high-quality technical documentation, reports, proposals, and advisory materials with clear and professional communication standards.

·       Build strong client relationships by understanding client needs, providing strategic advice, and developing innovative solutions that exceed expectations.

At Arup, you belong to an extraordinary collective – in which we encourage individuality to thrive. Our strength comes from how we respect, share and connect our diverse experiences, perspectives and ideas.

You will have the opportunity do socially useful work that has meaning – to Arup, to your career, to our members and to the clients and communities we serve. 

Is this role right for you?

·       A recognised tertiary qualifications in Security, Risk Management, Public Safety, Engineering, or a related discipline are essential.

·       Relevant professional certifications such as CPP (ASIS), Competent Person (Security), or Business Continuity certifications are highly regarded.

·       Minimum 6–8 years’ experience within the security industry, preferably within a consulting or advisory environment.

·       Strong understanding of the engineering and project delivery lifecycle, from concept and design through to construction and operational support.

·       Demonstrated experience delivering security and risk management solutions across sectors such as aviation, transport, critical infrastructure, healthcare, or data centres

What we offer you

At Arup, we care about each member’s success, so we can grow together.

Guided by our values, we provide an attractive total reward package that recognises the contribution of each of our members to our shared success. As well as competitive, fair, and equitable pay, we offer a career in which all of our members can belong, grow and thrive – through benefits that support health and wellbeing, a wide range of learning opportunities and many possibilities to have an impact through the work they do.

We are owned in trust on behalf of our members, giving us the freedom, with personal responsibility, to set our own direction and choose work that aligns with our purpose and adds to Arup’s legacy. Our members collaborate on ambitious projects to deliver remarkable outcomes for our clients and communities. Profit Share is a key part of our reward, enabling eligible members to share in the results of our collective efforts.

Please see a list of Arup’s Singapore benefits below:

·       Hybrid working policy & flexible working hours

·       13th month bonus

·       Birthday leave

·       Paid parental leave for birth mothers 16 weeks & new parents (excluding birth mothers) 4 weeks

·       Purchase Additional leave of up to 20 days (permanent employees)

·       Paid Annual subscription to relevant Professional association.

·       Reimbursement of Professional Engineers application and examination Fees

·       International mobility opportunities

·       QP allowance

·       Site Allowance

·       Work related travel insurance

·       Dental expense cover

·       Marriage leave (3 days)

·       Examination leave (2 days)

·       Family care leave

·       Bike Loans of up to SGD2000

Different people, shared values

Arup is an equal opportunity employer that actively promotes and nurtures a diverse and inclusive workforce. We are an open environment that embraces diverse experiences, perspectives, and ideas – this drives our excellence.

Guided by our values and alignment with the UN Sustainable Development Goals, we create and contribute to equitable spaces and systems, while cultivating a sense of belonging for all. Arup provide an environment where you will make a positive difference. Discover more about life at Arup at www.arup.com/careers/your-life-at-arup.

We are committed to making our recruitment process and workplaces accessible to all candidates. Please let us know if you need any assistance or reasonable adjustments throughout your application or interview process, and/or to perform the essential functions of the role. We will do everything we can to support you.

Our Application Process

Please apply directly through our applicant tracking system. Shortlisted candidates will be contacted by Talent Acquisition to discuss next steps. Stay safe online – Arup will never ask for your bank details as part of our recruitment process.

Arup does not accept unsolicited resumes from recruiters or employment agencies.

We are looking for a motivated and skilled Security Consultant to join our client's expanding cybersecurity team in Singapore. You will play a key role in assessing and exploiting security vulnerabilities across networks and web applications, helping clients strengthen their security posture through actionable remediation.

Working closely with internal teams and clients, you will conduct thorough vulnerability assessments and penetration tests while staying abreast of emerging threats and offensive security best practices. Your expertise will contribute to both client solutions and internal research initiatives.

Job Requirements:

To excel in this role, candidates should meet the following qualifications:

• Minimally 1 year of hands-on experience in vulnerability assessment, penetration testing, or offensive security.
• Relevant certification, such as OSCP or OSCP+
• Strong knowledge of network protocols, web application architecture, and common vulnerabilities including OWASP Top 10.
• Proficiency with industry-standard tools like Burp Suite, Metasploit, Nmap, and Nessus.
• Excellent analytical, problem-solving, communication, and report-writing skills.

Role Overview

We are seeking a motivated and skilled Security Consultant to join our cybersecurity team. The ideal candidate will have hands-on experience in vulnerability assessment and penetration testing (VAPT), and a strong foundation in offensive security practices. This role requires a proactive individual who can assess, identify, and exploit security vulnerabilities across network and web environments, and provide actionable remediation recommendations to strengthen clients’ security posture.

Key Responsibilities

• Conduct network and webapplication vulnerability assessments and penetration tests (VAPT) to identifyand validate security risks.
• Prepare detailed reports outlining findings, risks, and practical remediation strategies.
• Work closely with clients and internal teams to deliver effective security solutions.
• Stay updated with emerging security threats, exploits, and industry best practices.
• Support internal research and development to enhance service offerings.

Requirements

• Nationality: Must be a Singapore Citizen.
• Experience: Minimum 2 years of relevant hands-on security testing experience.
• Certifications (at least one required): OSCP/ OSCP+ / CRT
• Strong knowledge of network protocols, web application architecture, and common vulnerabilities (e.g.,OWASP Top 10).
• Familiarity with industry-standard tools (e.g., Burp Suite, Metasploit, Nmap, Nessus, etc.).
• Strong analytical and problem-solving skills with attention to detail.
• Excellent communication and report-writing skills.

Good to Have

• Additional offensive security certifications (e.g., OSWE, OSEP, CRTO, CRTL).
• Exposure to source code review,cloud penetration testing and mobile application testing.
• Experience working with government or regulated industry clients.

Why Join Us?

• Opportunity to work on challenging, real-world security engagements.
• Professional growth through advanced projects and certifications.
• Collaborative and knowledge-sharing environment.

Job Requirements

• Candidate must possess at least a Diploma in Computer Science/Information Security, Engineering (Computer/Telecommunication) or equivalent.
• Required skill(s): Python.
• Expertise in other programming languages are advantageous.
• Only Singaporeans or PR are eligible.
• Candidates who possess OSCP and CREST Registered Tester certification.will be preferred.

Job Description

• Participate in security review and assessment for our clients' systems.
• Participate in forensics and incident response engagements.
• Participate in security consultancy and advisory engagements.
• Learn how to work independently and in a team.

Skills Required:

• Bachelor’s degree in Cybersecurity, Information Technology, or a related field.
• Minimum of 5 years’ professional experience, including at least 3 years in IT security or related roles.
• Working exp in Banking environment is desirable
• Experience in managing Darktrace, ForeScout, Keysight, Pentera appliances is MUST
• Hands-on experience with network security, infrastructure security, etc.
• Strong understanding of network protocols and security technologies
• Comprehensive understanding of security principles, and industry best practices
• Excellent communication skills, including technical writing and documentation proficiency.
• Proven ability to manage multiple tasks and meet deadlines
• Certifications like CISSP, OSCP, GSEC, CySA+, CNNP Security or equivalent are preferred

Roles and Responsibility:

• Health maintenance
• Perform updates and patching
• System features enablement and recommend enhancements
• Troubleshoot issues/problems till proper closure
• Liaise with stakeholders
• Cross-functional collaboration
• Support solution implementation
• Participate in DR Drill and power shut-down activities
• Perform data reconciliation and reporting
• Render support for audit needs
• Plan and schedule system upgrade
• Act on tasks assigned by System PICs

Take the next step in your career with the leading global alternative legal service provider. Don’t compromise.

Over twenty years ago, Axiom started a movement to change the face of the legal industry. Today we continue to break boundaries with a combination of top-tier legal talent and globally recognized Fortune 500 clients. Trusted by the leading brands around the world, Axiomites gain access to the highest quality legal work while maintaining control over what and how much work they take on. Axiom puts its people first, attracting those who are thoughtful, caring and collaborative. We strive for excellence in everything we do and value integrity and our people above all else.

Prioritize the life you deserve with the legal work you love.

Currently, we're hiring Legal Consultant to join us with:

• 10+ years of relevant experience as in-house Finance and Banking or Commercial lawyer.
• Advise on Japan financial services and payments related legal and regulatory matters.
• Support the business in interactions with regulators and ongoing compliance related matters.
• Handle a broad range of commercial contracting and general in-house legal work.
• Work closely with regional and global stakeholders across the business and legal teams.
• Provide practical and commercially focused legal advice in a fast-moving environment.

The responsibilities for this role will include:

• Review, draft and negotiate a wide range of agreements.
• Provide practical legal advice related to financial services.
• Strong experience within Japan financial services and/or payments regulatory environments.
• Native Japanese language capability is essential.
• Experience supporting businesses operating in Japan and engaging with Japanese regulators.
• Broader commercial contracting and in house legal experience would be highly beneficial.
• Ability to work independently while collaborating across regional legal teams

Axiom is a leader in diversity, inclusion, and social engagement. Diversity is core to our values and we are proud to be an equal opportunity employer, offering access to a variety of professional development programs and continuing legal education opportunities.

Since 2000, we’ve reached legal professionals globally and been committed to reimagining legal work. We seek to live up to the New York Times’ prediction that, “A more sweeping transformation may be on the horizon. And it may look a lot like Axiom”. Our company is ranked #1 in business of law, innovation in corporate strategy, and innovation in law firm efficiency by the Financial Times.

Learn more about working at Axiom.

Equal Opportunity Employer: Axiom ensures equal employment opportunity in recruitment and employment, without discrimination or harassment on the basis of race, color, nationality, national or ethnic origin, religious creed or belief, political opinion, sex, gender reassignment, pregnancy or maternity, age, disability, alienage or citizenship status, marital (or civil or other partnership recognized by law) status, genetic predisposition or carrier status, sexual orientation, military service, or any other characteristic protected by applicable law. Axiom prohibits and will not tolerate any such discrimination or harassment.

We understand that many legal professionals have chosen to adopt the consultancy model, and we are happy to discuss this option with you. We offer both consultants and employees the opportunity to work with our enviable client roster.

Contact us in complete confidence to find out more about opportunities to work with Axiom as an employee or consultant. Axiom Global Solutions Pte. Ltd. (Axiom SG) is a registered employment agency (License #12S5884). Axiom as a corporate entity, does not offer legal advice, and is not a registered foreign law firm.

Axiom respects your privacy. For an explanation of the kind of information we collect about you and how it is used, our full privacy notice is available at https://www.axiomlaw.com/privacy-notice.

Employment with Axiom may be contingent upon successful completion of a background check, providing proof of identity, and possessing the necessary legal authorization to work.

By submitting an application, you acknowledge that all information contained therein, and provided at any part of the application process, is correct and accurate to the best of your knowledge.

Product area

Part of Google Cloud, Mandiant is a recognized leader in dynamic cyber defense, threat intelligence and incident response services. Mandiant's cybersecurity expertise has earned the trust of security professionals and company executives around the world. Our unique combination of renowned frontline experience responding to some of the most complex breaches, nation-state grade threat intelligence, machine intelligence, and the industry's best security validation ensures that Mandiant knows more about today's advanced threats than anyone.

Job description

As an Incident Response Consultant, you will provide industry-leading incident response, assessment, transformation, managed detection and response, and training services with in-depth tactical support. You will help organizations effectively detect and respond to threats and reduce the overall impact of business risk before, during, and after an incident. You will resolve security incidents quickly, effectively and at scale with complete incident response including investigation, containment, remediation, and crisis management. In this role, you will work on engagements including assisting clients in navigating technically complex and high-profile incidents, performing forensic analysis, threat hunting, and malware triage.

Qualifications

Job responsibilities

• Collaborate with internal and customer teams to investigate and contain incidents.
• Recognize and codify attacker Tools, Tactics, and Procedures (TTP) and Indicators of Compromise (IOC) that can be applied to current and future investigations.
• Conduct host forensics, network forensics, log analysis, and malware triage in support of incident response investigations.
• Support specific workstreams for a variety of client-facing investigations including the examination of cloud, endpoint, and network-based sources of evidence.
• Develop comprehensive and accurate reports and presentations for technical and non-technical audiences.

Minimum qualifications

• Bachelor's degree in Computer Science, Information Systems, Cybersecurity or related technical field or equivalent practical experience.
  
• Experience in incident response investigations, analysis, or containment actions.
• Experience in any three of the following: network or log forensic analysis, malware triage analysis, disk, or memory forensics.
• Experience in cybersecurity in one of the following areas: network security, wireless security, web application assessments, social engineering, scripting, cloud security, reverse engineering, or incident response.

Preferred qualifications

• Experience with malware triage analysis and disk or memory forensics in one or more operating systems.
• Experience with enterprise security architecture and security controls.
• Experience with cloud incidents or forensic responses.
• Excellent time and project management skills.

In Oracle HCM, a security design error does not just create an access support ticket — it creates a data breach, a compliance gap, or a go-live delay. If you understand the role inheritance hierarchy deeply enough to design a multi-country security model without creating orphaned data roles, this is your workstream.

ABOUT ROLLING ARRAYS

Rolling Arrays is a private equity-backed, award-winning HR Tech consulting firm — Asia Pacific's premium partner for enterprise HR digital transformation. Headquartered in Singapore and with offices across India, Malaysia, Australia, and Hong Kong, we have delivered more than 200 HR Transformation projects since our founding in 2009, and were recognised as one of Singapore's Top 100 fastest-growing companies in 2025. We specialise in SAP SuccessFactors, Oracle HCM, and Workday across the full delivery spectrum: HR process design and consulting (ALIGN), technology implementation (AUTOMATE), change management and adoption (ADOPT), and managed support services (AMS).

POSITION SUMMARY

We are seeking a Consultant specialising in Oracle HCM Cloud Application Security and Authorisations. You will design, configure, and test the RBAC framework across Oracle HCM Cloud modules, ensuring that clients' HR data is protected by the principle of least privilege and that the security model is sustainable, auditable, and upgrade-safe.

WHAT YOU WILL DO

• Design the RBAC framework — deciding how many custom roles are needed, whether to deep-copy or shallow-copy predefined Oracle roles, whether to use fixed data roles or the Area of Responsibility pattern for HR specialists, and what naming convention will allow security administrators to maintain the system after go-live
• Configure HCM Data Roles — combining job roles with security profiles across every dimension: person, organisation, position, payroll, Legislative Data Group, and document type
• Lead client security design workshops — translating access matrix requirements from HR, IT, and Finance into Oracle's security model, and navigating the reality that requirements from those three groups rarely align on first pass
• Design and execute the security test strategy — building positive and negative test cases and producing the documented test evidence that an auditor will ask for at go-live
• Own the Segregation of Duties analysis — identifying conflicting duty combinations that create audit risk, designing role structures that prevent access conflicts, and producing the SoD compliance matrix for client sign-off
• Configure role provisioning rules — automatic provisioning based on HR data attributes versus manual assignment, and the provisioning lifecycle for workers, contingent workers, and system users

WHY ROLLING ARRAYS

Security at Rolling Arrays is a first-class delivery workstream, not an afterthought assigned to a junior consultant in the final four weeks. You will work on multi-module Oracle HCM programmes across Singapore, Malaysia, Australia, and India — each with different legislative data privacy requirements — and build genuine expertise in Oracle's most complex and consequential configuration domain.

OUR CULTURE CODE

Six values define how we operate every day at Rolling Arrays:

• Thinking Smart — spot patterns, chase smarter solutions, and illuminate the path to greater productivity
• Never Stop Learning — refine and elevate skills constantly; explore the world with a curiosity lens
• Being Nice to Everyone — treat everyone with genuine warmth and respect, regardless of seniority
• Be Super Patient with Customers — exercise patience and proactivity in every client interaction
• Help Your Teammates — share the load, lighten the stress, nurture a truly collaborative team
• Acknowledge Your Mistakes — embrace mistakes as steppingstones; grow from each one

WHAT WE'RE LOOKING FOR

• 2–4 years of Oracle HCM Cloud Security configuration experience on live implementation projects — has personally designed and built data roles and security profiles, not observed another consultant do it
• Demonstrated data role design — has combined job roles with security profiles and validated the resulting data access scope through positive and negative testing
• Experience leading or materially contributing to the security workstream for at least one end-to-end Oracle Cloud implementation through to go-live
• Ability to translate a client access matrix into Oracle's security model and explain the design choices in business language to HR leadership
• SoD conflict identification and documentation experience

PREFERRED QUALIFICATIONS

• Oracle Fusion Cloud Applications HCM Process Essentials certified — the foundational HCM credential; at Consultant level this is the expected starting point for certification
• Oracle Global Human Resources Cloud Implementation Professional — working toward this certification demonstrates commitment to the domain; security is inseparable from Core HR module depth
• Oracle Risk Management Cloud (Advanced Access Controls) certification or hands-on experience — for systematic SoD risk analysis and continuous monitoring
• Oracle IDCS (Identity Cloud Service) or Oracle Access Governance exposure — for enterprise identity lifecycle management alongside HCM security

BUSINESS & CONSULTING SKILLS

• Audit-grade documentation — produces security test evidence and SoD matrices that withstand scrutiny from compliance and internal audit teams
• Business translation — explains role inheritance, data security, and access control in language that HR Directors and IT governance teams can act on
• Structured problem-solving — diagnoses security issues methodically rather than through trial and error
• Cross-team collaboration — works effectively with HR, IT, and Finance workstreams whose requirements rarely align on first pass
• Attention to detail — a missed security configuration creates a breach, not just a ticket; precision is non-negotiable
• Professional client interaction — represents RAC credibly in client-facing sessions at working level

CAREER PROGRESSION

Consultant → Senior Consultant → Lead Consultant → Solution Architect → Practice Lead

* Strong hands-on experience performing compliance testing of mobile applications that meet certain Technology Security Standardsand regulatory/industries requirements, eg MAS TRM, OWASP MSTG
* In-depth knowledge of iOS/android architecture, including their underlying security mechanisms
* Experienced with performing secure code review of Swift / Kotlin/Objective-C and Java applications.
* Proficient with various reverse engineering tools such as IDA Pro, Ghidra, as well as Frida.re hooking framework or equivalent
* Knowledge of RM architectures (armeabi-v7a, arm64-v8a, etc) an advantage.
* Experience analyzing and bypassing various security mechanisms commonly present in mobile applications (SSL pinning,root/jailbreak detection, anti [tampering, in-app VPN, etc).
* Ability to develop BURP extensions to aid with mobile and web application tests.
* Solid experience conducting Web Application Penetration tests following industry standards methodologies.
* Ability to conduct comprehensive source code reviews across multiple languages (mobile, web, backend).
* Web & Infrastructure Security Testing

Qualifications & Skills

* Bachelor’s degree in Computer Science, Information Security, or related discipline.

* Minimum 2 years of hands-on penetration testing or relevant offensive security experience
* CREST CRT certification mandatory.
* Additional certifications such as OSCP, OSCE, OSEE, OSWE, Red Teaming, Cloud Security, Artificial Intelligence securitycredentials are advantageous.

* Excellent oral and written communication skills, including the ability to present technical findings.

* Strong organizational and time management skills; able to manage multiple engagements and meet tight deadlines.

* Self-motivated, proactive and able to work independently or as part of a team