Practice Partner - Penetration Testing

Non-Equity | Project-Based | Revenue Share

Palisade is looking for an experienced penetration tester to join us as a Practice Partner - Penetration Testing.

This is not a conventional salaried position. It is designed for a senior practitioner who wants to help build and lead a penetration-testing practice under an established Singapore cybersecurity business without taking on the administrative burden of running a consultancy alone.

You will bring technical expertise, customer relationships and delivery leadership. Palisade will provide the business platform, including the company entity, brand, website, marketing, customer contracting, invoicing, operational systems and compliance framework.

The opportunity

As Practice Partner, you will help originate, scope and lead penetration-testing engagements delivered through Palisade.

You will work directly with Palisade’s founder, providing technical guidance during live engagements, reviewing testing methodology and findings, supporting customer conversations and ensuring that every engagement is delivered to a high professional standard.

You will operate publicly as part of the Palisade team.

What you will do

You will be expected to:

• introduce and develop customer opportunities;

• join presales, discovery and scoping calls;

• help define testing scope, pricing assumptions and rules of engagement;

• design and approve penetration-testing plans;

• provide technical guidance during testing;

• advise on exploitation paths, risk assessment and evidence quality;

• review vulnerabilities, severity ratings and remediation recommendations;

• perform technical quality assurance on reports;

• join customer findings and remediation calls;

• support retesting and project close-out;

• help improve Palisade’s methodologies, templates and internal processes;

• mentor Palisade team members through real customer engagements;

• contribute to the long-term development of the penetration-testing practice.

You are not expected to perform all hands-on testing yourself, although you may participate directly where required. Your primary responsibility will be to provide the commercial and technical leadership needed to deliver high-quality engagements.

What Palisade provides

Palisade will provide:

• a Singapore-based cybersecurity company and customer-facing brand;

• website presence and marketing support;

• customer contracting and statements of work;

• invoicing and payment collection;

• project administration;

• testing and reporting processes;

• secure collaboration and evidence-management systems;

• professional templates and customer deliverables;

• the company’s regulatory, information-security and accreditation framework;

• opportunities to build a visible specialist practice without establishing a separate consultancy.

Commercial model

This is a project-based, performance-driven role with a high compensation pool.

The precise percentage and responsibilities will be confirmed during the discussion.

Compensation may vary depending on whether you:

• introduced the customer;

• led the sales and scoping process;

• provided technical supervision;

• participated in hands-on delivery;

• performed report review and technical sign-off;

• remained involved through remediation and retesting.

There is no guaranteed project volume, fixed monthly salary or equity allocation.

Who we are looking for

You should have substantial practical experience in penetration testing, ideally across several of the following areas:

• web application penetration testing;

• API security testing;

• external and internal infrastructure testing;

• cloud security assessments;

• mobile application testing;

• Active Directory testing;

• vulnerability validation and exploitation;

• technical reporting and remediation guidance.

You should also be comfortable:

• speaking directly with customers;

• scoping and estimating engagements;

• defending technical findings;

• reviewing another tester’s work;

• mentoring less experienced practitioners;

• balancing technical depth with commercial judgment;

• taking ownership of delivery quality.

Relevant certifications such as CREST, OSCP, OSEP, OSWE, CRTO or equivalent practical experience are beneficial, but demonstrated delivery capability is more important than certification alone.

Essential requirements

Candidates must:

• have demonstrable professional penetration-testing experience;

• be able to lead customer-facing technical conversations;

• have experience producing or reviewing professional pentest reports;

• be willing to operate under Palisade’s policies, security controls and delivery methodology;

• maintain strict confidentiality and professional independence;

• disclose potential conflicts of interest;

• be legally permitted to perform the role from Singapore;

• be willing to work under a formal project-based agreement with Palisade.

The arrangement may be structured as project-based employment or another compliant engagement model.

This role is suitable for

This opportunity may suit:

• an experienced penetration tester who wants to build a consulting practice;

• a senior consultant looking for more commercial ownership;

• a former consultancy lead who prefers project-based work;

• an independent practitioner who wants access to a stronger business platform;

• a technical specialist with customer relationships but limited interest in running company operations.
  

This role is not suitable for

This is unlikely to be a good fit for someone seeking:

• a fixed monthly salary;

• guaranteed hours;

• a junior or supervised testing role;

• purely hands-on work without customer involvement;

• immediate company equity;

• a passive referral commission without responsibility for delivery.
  

About Palisade

Palisade is a Singapore-based cybersecurity and technology consultancy focused on penetration testing, security consulting, Cloud, DevOps and secure engineering.

Our goal is to build a senior-led practice where customers work directly with highly experienced practitioners rather than being passed through layers of account management and junior delivery teams.

How to apply

Please send:

• a short introduction;

• your penetration-testing experience;

• examples of the types of engagements you have led;

• relevant certifications;

• industries or customer segments you have worked with;

• your location and availability;

• whether you already have customer relationships or an existing professional network;

• your preferred commercial working model.
  

Confidential discussions are welcome.