Lead Penetration Tester & Source Code Review Expert

Vouch Recruitment; Singapore; On-site; SGD 70,000 - 120,000; Full time

Job summary

Vouch Recruitment is seeking an experienced Penetration Tester in Singapore with strong source code review skills. The role covers hands-on testing across web, network, mobile, IoT, and cloud domains, with a focus on identifying vulnerabilities and producing actionable reports.

You will also mentor team members and stay updated on evolving security threats. The ideal candidate has 1–2 years of hands-on experience, credentials like CREST/OSCP are desirable, and you should be able to clearly

Qualifications

• Hands-on penetration testing across multiple domains (web, network, mobile, IoT, cloud).
• Strong ability to perform and lead detailed source code reviews with secure coding awareness.
• Desirable CREST, OSCP, or similar qualifications.

Responsibilities

• Perform detailed source code reviews to identify security vulnerabilities.
• Act as the domain expert in source code analysis.
• Perform hands-on penetration testing across multiple domains: web applications, networks, mobile applications, thick-client environments, IoT devices, and cloud platforms.
• Identify, exploit, and document security vulnerabilities.
• Create comprehensive reports detailing findings and mitigations.
• Collaborate with team members to share knowledge and improve security testing methods.
• Conduct security assessments and audits of systems, applications, and networks.
• Keep updated on latest security trends and technologies to maintain strong security posture.

Skills

Penetration testing

Source code review

Web security

Network security

Mobile security

IoT security

Cloud security

Mentoring

Report writing

Job description

Vouch Recruitment is seeking an experienced Penetration Tester in Singapore with strong source code review skills. The role covers hands-on testing across web, network, mobile, IoT, and cloud domains, with a focus on identifying vulnerabilities and producing actionable reports.

You will also mentor team members and stay updated on evolving security threats. The ideal candidate has 1–2 years of hands-on experience, credentials like CREST/OSCP are desirable, and you should be able to clearly