Application Security Engineer (Pentester)

Crypto.com; Singapore; On-site; SGD 70,000 - 100,000; Full time

Job summary

A leading company in the cryptocurrency field is seeking a security expert focused on vulnerability discovery and incident response. This role requires expertise in penetration testing, experience with various tools like BurpSuite, and a strong foundational knowledge of security principles. The successful candidate will be engaged in proactive security measures and work collaboratively within an agile environment.

Qualifications

• Minimum four years of experience in Web API testing and proficiency in using BurpSuite.
• Experience with Mobile App testing, jailbreaking/rooting, API hooking, reverse engineering.

Responsibilities

• Discover security vulnerabilities through design review and penetration testing.
• Provide security training and conduct agile scrum meetings.
• Support application-level security monitoring and incident response.

Skills

Vulnerability Discovery

Security Training

Incident Response

Education

OSCP or equivalent (CREST)

Tools

BurpSuite

Job description

Responsibilities

• Discover security vulnerabilities through design review, source code review and penetration testing, either manually or by using automated tools, and follow up on the remediation process
• Participant in relevant agile scrum meetings and provide professional recommendations on the design of security controls, libraries, and/or protocols
• Conduct security-related training sessions
• Implement various security control verification and risk detection through automated scripts
• Provide support on application-level security monitoring, intrusion detection, and incident response

Requirements

• OSCP (or equivalent, such as CREST) is a MUST.
• A deep understanding of OWASP Top 10 and the ability to detect and address logic flaws are highly desirable.
• Minimum four years of experience in Web API testing and proficiency in using BurpSuite is preferred.
• Experience with Mobile App testing, comprehension of jailbreaking/rooting a device, API hooking, reverse engineering, and de-obfuscation is highly beneficial
• Fluency in spoken and written English is essential, and proficiency in Mandarin would be advantageous.