Senior Penetration Tester & Security Researcher (Hybrid SG)

BNF SG Pte Ltd; Santo Niño 1st; Hybrid; PHP 4,412,000 - 6,863,000; Full time

Job summary

BNF SG Pte Ltd is seeking a Mid-to-Senior Penetration Tester & Security Researcher to join our Singapore team. You will tackle complex security challenges, perform grey-box/white-box testing, and engage across web apps, infrastructure, cloud, AI systems, and mobile apps.

The role emphasizes deep security research, rigorous reporting, and collaboration within an international team. Hybrid work in Singapore with client-site engagements is expected.

Qualifications

• 3+ years hands-on pentesting/security research (mandatory).
• Expertise in at least two areas: web app pen-testing, infra/network pen-testing (including Active Directory) with Windows/Linux internals and privilege escalation, or manual source code review and vulnerability research.
• OSCP or CREST CRT certification (mandatory).
• Strong research mindset and ability to independently investigate unfamiliar technologies and attack surfaces.
• Hands-on experience using AI tools to support security testing, research, automation, or tool development.
• Excellent written and verbal English communication skills and ability to work in a hybrid model in Singapore.

Responsibilities

• Conduct penetration testing and security research across web apps, infrastructure and networks, cloud and Kubernetes environments, AI systems, mobile apps, and source code.
• Take ownership of security reporting, including technical accuracy, root-cause analysis, and real-world business impact.
• Present vulnerabilities, findings, and recommendations clearly to clients and their technical teams.
• Build internal security tools, methodologies, automation, and agentic workflows that enable the team to work faster and go deeper.
• Contribute to red team and adversary emulation engagements.
• Independently investigate unfamiliar technologies, attack surfaces, and complex technical problems.

Skills

Penetration testing

Web app pentesting

Infra & network pentesting

Source code review

Security research

AI security tooling

Education

OSCP or CREST CRT certification

Job description

BNF SG Pte Ltd is seeking a Mid-to-Senior Penetration Tester & Security Researcher to join our Singapore team. You will tackle complex security challenges, perform grey-box/white-box testing, and engage across web apps, infrastructure, cloud, AI systems, and mobile apps.

The role emphasizes deep security research, rigorous reporting, and collaboration within an international team. Hybrid work in Singapore with client-site engagements is expected.