Application Security & Penetration Tester

PCSS; Singapore; On-site; SGD 60,000 - 90,000; Full time

Job summary

PCSS is seeking a security tester in Singapore to perform application and infrastructure penetration tests for customers, including web, mobile, and web services. The role involves both manual testing and automated tooling, with reporting in standard formats and client-facing discussions.

You will conduct security assessments, write formal reports, retest vulnerabilities, and participate in scoping calls to estimate project timelines.

Qualifications

• Perform application and infrastructure penetration tests for customers.
• Conduct security assessments and penetration tests (web, mobile, web service, etc.). Assessments involve manual testing and analysis as well as the use of automated vulnerability scanning/testing and/or code review tools (Burp Suite, Fortify, Checkmarx).
• Write a formal security assessment report using the company’s standard reporting format.
• Participate in conference calls or on client sites to scope projects and estimate time requirements.
• Retest vulnerabilities and update reports with retesting results.
• Perform security reviews of application designs, source code and deployments for web apps, mobile apps, thick clients, and SaaS.
• Contribute to improvements of provided security services and methodologies.
• Report and present findings to clients.

Responsibilities

• Perform application and infrastructure penetration tests for customers.
• Write formal security assessment reports.
• Present findings to clients and team.
• Assist in scoping calls and project estimation.
• Retest and update vulnerability reports.
• Review security of designs, code and deployments.

Skills

Penetration testing

Vulnerability assessment

Report writing

Client communication

Security tooling

Team player

Education

Degree in Computer Engineering, Computer Science, Information Systems, Digital Forensics or equivalent qualifications

Tools

Burp Suite

HP Fortify

Checkmarx

Nessus

Job description

PCSS is seeking a security tester in Singapore to perform application and infrastructure penetration tests for customers, including web, mobile, and web services. The role involves both manual testing and automated tooling, with reporting in standard formats and client-facing discussions.

You will conduct security assessments, write formal reports, retest vulnerabilities, and participate in scoping calls to estimate project timelines.