Lead Penetration Tester & Source Code Reviewer

VOUCH RECRUITMENT PTE. LTD.; Singapore; On-site; SGD 60,000 - 90,000; Full time

Job summary

Vouch is seeking an experienced Penetration Tester with strong focus on source code review for a Singapore-based company. The candidate will lead, mentor, and teach team members while performing deep vulnerability assessments across web, network, mobile, IoT and cloud environments.

Ideal candidates have hands-on pentesting across domains, proven source code review experience, and certifications like CREST or OSCP.

Qualifications

• 1–2 years hands-on penetration testing across multiple domains.
• Proven experience performing and leading detailed source code reviews with secure coding practices.
• Desirable certifications like CREST or OSCP.
• Strong report writing and ability to explain technical issues to non-technical stakeholders.

Responsibilities

• Perform detailed source code reviews to identify security vulnerabilities.
• Act as domain expert in source code analysis.
• Perform hands-on penetration testing across web, network, mobile, thick-client, IoT and cloud.
• Identify, exploit and document security vulnerabilities.
• Create comprehensive reports with findings and mitigations.
• Collaborate with team to improve security testing methods.
• Conduct security assessments and audits of systems, applications and networks.
• Keep updated on latest security trends and technologies.

Skills

Penetration testing

Source code review

Security reporting

Mentoring

Education

Penetration testing certification (CREST/OSCP)

Job description

Vouch is seeking an experienced Penetration Tester with strong focus on source code review for a Singapore-based company. The candidate will lead, mentor, and teach team members while performing deep vulnerability assessments across web, network, mobile, IoT and cloud environments.

Ideal candidates have hands-on pentesting across domains, proven source code review experience, and certifications like CREST or OSCP.