search Browse Jobs
Information Security (Vulnerability and Penetration )Unison Group · Singapore, Singapore
Unison Group logo

Unison Group

company page ↗

Information Security (Vulnerability and Penetration )

🗓️ Posted 2026-08-31 Singapore, Singapore Full-time Hybrid ICT
💰 Salary S$333–S$500/mo (S$4,000–S$6,000/yr) 📊 Market S$6,000–S$10,000/mo

About the Company

Your Partner in Success Singapore India Malaysia UAE Australia Unison Consulting was launched in Singapore on September 2012, the hub of the financial industry, with innovative visions in the technocratic arena. We are a boutique next-generation Technology Company with strong business-interests in Liquidity risk, Market Risk, Credit Risk and Regulatory Compliance. Unison provides technology consulting and services to implement Risk Management and Risk Analytics System for Financial Institutions. Our services suite comprises of Techno-Functional consulting, systems integration, Business Intelligence, information management, and custom development of IT solutions, plus project management expertise for financial institutions. We have expertise in latest cutting edge technology to achieve better total cost of ownership. Through our qualified professionals, we assist you drive your unique risk management strategies, whether that means efficient monitoring, improving risk appetite of the financial institutions, complying with regulations, or capturing growth opportunities through innovation, this is what maximizes your decision taking potential. At Unison Consulting, we view clients as partners, and our success is only measured by the success of our partners. So we put it all on the table in order to exceed expectations. Our staff consists of young, energetic and innovative consultants who are never afraid to challenge the conventions and push the boundaries in an effort to help our clients. For every project, no matter how large or how small, we strive to not only meet your needs, but deliver a showcase in your field. General Specialties: Fermat ALM Implementation, Risk Management Systems Integerators, EDW and DWH, Risk MIS System implementations, Risk Insight, Big Data Solutions, Treasury, Artificial Intelligence, Databricsks, SAP BTP, Tagetik

Requirements

  • ● Minimum 7 years of relevant security experience
  • ● Extensive experience in information security and/or IT risk management
  • ● Proven experience owning and running a vulnerability management and/or penetration testing program, process, and governance forum
  • ● Demonstrated leadership, project, and team-building skills, including the ability to lead teams and drive projects and initiatives across multiple departments
  • ● Ability to identify risks associated with business processes, operations, information security programs, and technology projects
  • ● Ability to communicate with diverse audiences, both technical and non-technical, to build consensus on risk-based vulnerability management and penetration testing
  • ● Experience with process optimization
  • ● Experience with process automation and workflow using ITSM tools
  • ● Hands-on experience with vulnerability management, penetration testing, and security engineering
  • ● Experience with industry-known vulnerability management, penetration testing, and CSPM solutions
  • ● Strong knowledge of risk-based vulnerability management, including triage of vulnerabilities to determine "True Risk" exposure to Singlife
  • ● Experience in log configuration, formats, and feeding logs into SIEM platforms
  • ● Strong hands-on penetration testing background across multiple domains (network, web, mobile, API, and cloud), including managing external PT vendors and triaging and validating penetration test findings
  • ● Working knowledge of recognized penetration testing methodologies and frameworks (OWASP Testing Guide, PTES, NIST SP 800-115, MITRE ATT&CK) and common offensive tooling (e.g., Burp Suite, Nmap, Metasploit, Kali Linux, Cobalt Strike)
  • ● Working knowledge of one or more programming/scripting languages such as Python, C++, Java, Ruby, Node, Go, and/or PowerShell
  • ● Academic: Bachelor's degree in Computer Science or Information Technology (preferred)
  • ● Professional Certification(s): One or more of CISSP, CISM, CISA, or SANS/GIAC certifications, together with a recognized penetration testing certification such as OSCP, GPEN, GWAPT, CREST (CRT/CCT), or CEH (preferred, or willing to become certified within one year)