Cyber security consultant (OSCP, CRT cert required)

JOBEE PTE. LTD.; Singapore; On-site; SGD 110,000 - 140,000; Full time

Job summary

JOBEE PTE. LTD. seeks a Security Consultant in Singapore with a broad pentesting skill set and a strong mobile testing focus.

The role requires 2–6 years in security testing, and offers an annual salary target of 110,000–140,000 SGD including standard bonuses. Local Singaporeans, PRs or eligible pass holders are welcomed and on-site presence is required. The candidate should demonstrate expertise in iOS/Android security, secure code review of Swift/Kotlin/Java, and experience with reverse

Qualifications

• 2–6 years of professional security testing experience.
• Experience in mobile app security testing and compliance testing.
• Knowledge of iOS/Android security and architecture.
• Familiar with reverse engineering tooling and security bypass techniques.

Responsibilities

• Conduct mobile and web application security testing across platforms.
• Perform source code reviews for Swift, Kotlin, Objective-C and Java.
• Bypass security controls where appropriate to assess resilience.
• Develop BURP extensions to aid testing and automation.
• Document findings with remediation guidance for developers.

Skills

OSCP

Mobile pentesting

Reverse engineering

Code review

Web pentesting

Infrastructure pentests

SSL bypass

Burp extensions

ARM security

Mobile platforms

Tools

IDA Pro

Ghidra

Frida

Burp Suite

Job description

Security Consultant for Singapore with broad standard skills in Pentesting and strong mobile testing focus as follows:

General

• Between 2 and 6 years experience
• Annual target salary, incl. standard bonus categories: between 110,000 and 140,000 SGD
• Local Singapore, PR or existing workpass / on-site Singapore

Skills

• OSCP, CRT, CCT, other offensive security certificates
• Strong experience performing compliance testing of mobile applications that meet certain Technology Security Standards and regulatory/industries requirements : eg. MAS TRM, OWASP MSTG.
• In-depth knowledge of iOS / Android architecture and their underlying security mechanisms.
• Experienced with performing secure code review of Swift / Kotlin / Objective-C and Java applications.
• Proficient with various reverse engineering tools such as IDA Pro, Ghidra, as well as Frida.re hooking framework or equivalent.
• Knowledge of ARM architectures (armeabi-v7a, arm64-v8a, etc.) as plus.
• Ideal candidate will also have experience bypassing various security mechanisms commonly present in mobile applications (SSL pinning, root/jailbreak detection, anti-tampering, in-app VPN, etc.).
• Ability to develop BURP extensions to aid with mobile and web application tests.
• Web Applications Pentest
• Source Code Review
• Infrastructure Pentests