Cybersecurity Consultant, (VAPT Attack & Penetration), Technology Consulting

Role summary

Written by MyIslandJob from the job title and employer. See the employer's page for the full description.

The role focuses on vulnerability assessment and penetration testing (VAPT) for applications, networks, infrastructure and other technology environments. Candidates are expected to plan and conduct ethical hacking engagements, identify and validate security weaknesses, assess business impact, and produce clear technical and executive reports. The position typically requires a degree or equivalent experience in cybersecurity, information technology or a related discipline, together with practical knowledge of penetration-testing methodologies, common vulnerabilities and security tools. Familiarity with standards such as OWASP, OSSTMM, NIST or CREST is valuable. Strong analytical, report-writing and communication skills are essential, as consultants work directly with clients, explain findings and recommend practical remediation. Relevant certifications such as OSCP, CEH, CREST or equivalent are advantageous.

About the employer

EY, or Ernst & Young, is a global professional-services organization providing assurance, consulting, strategy, tax and transactions services. Its consultants help organizations improve performance, manage risk, modernize technology and respond to changing regulatory and business demands. EY operates across many industries, including financial services, government, healthcare, consumer products and technology. The Singapore practice serves local and international clients and is part of EY's wider Asia-Pacific network. Within EY Technology Consulting, cybersecurity professionals support clients with security strategy, vulnerability management, penetration testing, digital risk and regulatory compliance. The firm offers exposure to complex projects, multinational teams and a broad range of technologies. Work can be demanding, with deadlines, client presentations and occasional travel, but it provides structured learning, professional development and opportunities to build specialist expertise in cybersecurity and consulting.