Penetration Tester (VAPT)

About the Role

A Singapore-based security solutions company is seeking a skilled Penetration Tester with extensive expertise in source code review. The successful candidate will have comprehensive hands-on experience in penetration testing across diverse areas including web, network, mobile, thick-client, IoT, and cloud security. This position also involves leadership and mentoring to elevate the skills of fellow team members.

Key Responsibilities

• Conduct detailed reviews of source codes to discover security vulnerabilities.
• Serve as the subject matter expert in source code analysis.
• Execute practical penetration tests on web applications, networks, mobile applications, thick-client systems, IoT devices, and cloud infrastructures.
• Find, exploit, and meticulously document security issues.
• Produce thorough reports outlining findings along with suggested remediation steps.
• Collaborate with colleagues to disseminate knowledge and enhance testing procedures.
• Perform security evaluations and audits for various systems, applications, and networks.
• Stay informed about the latest vulnerabilities, security trends, and technologies to maintain strong security defenses.

Candidate Profile

• Possess 1-2 years of practical experience in penetration testing across multiple domains.
• Demonstrated ability to perform and lead comprehensive source code audits with a sound understanding of secure coding standards.
• Relevant certifications such as CREST, OSCP, or equivalent penetration testing qualifications are preferred.
• Extensive knowledge of prevalent security weaknesses.
• Excellent report writing capabilities with aptitude in communicating technical information to both technical and non-technical audiences.

Additional Information

Employment arrangement is full-time onsite in Singapore. The role is appointed by a licensed employment agency (EA License: 22C1396EA Personnel: R1551466). Those interested can inquire to learn more about this and other available positions.