Banking Cybersecurity Penetration Tester

OCBC; Singapore; On-site; SGD 120,000 - 180,000; Full time

Job summary

OCBC invites seasoned security testers to join our Cyber Security team in Singapore. You will perform application, mobile, and network penetration testing, identify vulnerabilities, and work with engineering teams to mitigate risks.

We value proactive, collaborative professionals with 3+ years of hands-on testing, secure code review experience, and relevant certifications. Knowledge of MAS TRMG is a plus; experience with banks in Singapore is highly preferred.

Qualifications

• 3+ years of hands-on penetration testing for web, mobile, and APIs.
• Experience conducting Secure Code Review.
• Degree in computer science/computer engineering/information security or equivalent.
• Working knowledge of information security essentials.
• Familiarity with MAS TRMG and regulatory requirements.
• Good communication skills; able to work independently and in a team.
• Certifications from GIAC/Offensive Security/CREST required.
• Hands-on with Kali Linux and security testing tools (Burp, Tenable).
• Experience testing Banks in Singapore preferred.
• AS400/legacy mainframe code review experience a plus.

Responsibilities

• Perform application penetration testing on web-based applications, APIs.
• Perform mobile application penetration testing across different mobile platforms.
• Perform network penetration testing on systems.
• Exploit vulnerabilities to gain access and expand access to remote systems.
• Document and explain security issues identified during assessments and recommend mitigations.
• Research cutting-edge security topics and attack vectors.
• Conduct compliance testing against Security Standards and MAS TRMG requirements.
• Conduct secure code reviews when required.
• Perform thick client penetration testing when required.

Skills

Penetration testing

Kali Linux

Burp Suite

Secure Code Review

Threat modeling

Team collaboration

Education

Bachelor’s degree in CS/CE/Info Security

Tools

Tenable

Job description

OCBC invites seasoned security testers to join our Cyber Security team in Singapore. You will perform application, mobile, and network penetration testing, identify vulnerabilities, and work with engineering teams to mitigate risks.

We value proactive, collaborative professionals with 3+ years of hands-on testing, secure code review experience, and relevant certifications. Knowledge of MAS TRMG is a plus; experience with banks in Singapore is highly preferred.