AppSec Penetration Tester - DevSecOps Driven

Aryan-Solutions-Pte.-Ltd.

Singapore

On-site

SGD 60,000 - 100,000

Full time

14 days+

Application generator

Don’t send a generic resume — generate a resume and cover letter tailored to this exact role.

Get past ATS filters

Job summary

Aryan-Solutions-Pte.-Ltd. in Singapore seeks an experienced Application Security Penetration Tester to assess web applications, APIs, and related environments. You will identify vulnerabilities via penetration testing, SAST/DAST and VAPT, and work with DevOps to enable secure DevSecOps practices.

The role focuses on remediation, risk evaluation against OWASP Top 10, and reporting. You will collaborate with development and security teams to improve secure coding and testing in CI/CD pipelines.

Qualifications

3–8 years of experience in Application Security, Penetration Testing or DevSecOps.
Hands-on with SAST/DAST and vulnerability assessment tooling.
Knowledge of OWASP Top 10 and common app vulnerabilities.

Responsibilities

Perform security assessments across web apps and APIs.
Conduct SAST, DAST, and VAPT activities and document findings.
Validate vulnerabilities and suggest remediation actions.
Evaluate risk against OWASP Top 10 and similar risks.
Produce clear assessment reports with severity and remediation.
Support remediation and retesting; integrate security tests into CI/CD.
Collaborate with DevOps, development and security teams.

Skills

SAST

DAST

VAPT

OWASP Top 10

Burp Suite

OWASP ZAP

Checkmarx

Fortify

SonarQube

Nessus

Qualys

Jenkins

GitLab

GitHub

Azure DevOps

Docker

Kubernetes

Tools