Penetration Tester

VOUCH RECRUITMENT PTE. LTD.; Singapore; On-site; SGD 60,000 - 90,000; Full time

Job summary

Vouch is seeking an experienced Penetration Tester with strong focus on source code review for a Singapore-based company. The candidate will lead, mentor, and teach team members while performing deep vulnerability assessments across web, network, mobile, IoT and cloud environments.

Ideal candidates have hands-on pentesting across domains, proven source code review experience, and certifications like CREST or OSCP.

Qualifications

• 1–2 years hands-on penetration testing across multiple domains.
• Proven experience performing and leading detailed source code reviews with secure coding practices.
• Desirable certifications like CREST or OSCP.
• Strong report writing and ability to explain technical issues to non-technical stakeholders.

Responsibilities

• Perform detailed source code reviews to identify security vulnerabilities.
• Act as domain expert in source code analysis.
• Perform hands-on penetration testing across web, network, mobile, thick-client, IoT and cloud.
• Identify, exploit and document security vulnerabilities.
• Create comprehensive reports with findings and mitigations.
• Collaborate with team to improve security testing methods.
• Conduct security assessments and audits of systems, applications and networks.
• Keep updated on latest security trends and technologies.

Skills

Penetration testing

Source code review

Security reporting

Mentoring

Education

Penetration testing certification (CREST/OSCP)

Job description

Vouch is currently working with a Singapore-based company that specializes in security solutions.

We are seeking an experienced Penetration Tester with strong expertise in source code review. The ideal candidate will not only possess hands-on experience in various domains such as web, network, mobile, thick-client, IoT, and cloud security but also demonstrate the ability to lead, mentor, and teach other team members. This role requires a deep understanding of security vulnerabilities, penetration testing methodologies, and the ability to perform thorough source code reviews to identify potential security flaws.

Primary Responsibilities:

• Perform detailed source code reviews to identify security vulnerabilities.
• Act as the domain expert in source code analysis.
• Perform hands-on penetration testing across multiple domains: web applications, networks, mobile applications, thick-client environments, IoT devices, and cloud platforms.
• Identify, exploit, and document security vulnerabilities.
• Create comprehensive reports that detail findings and recommended mitigations.
• Collaborate with team members to share knowledge and improve security testing methods.
• Conduct security assessments and audits of systems, applications, and networks.
• Keep updated on the latest security trends, vulnerabilities, and technologies to ensure a strong organizational security posture.

What I Am Looking For:

• At least 1-2 years of hands-on experience in penetration testing across various domains.
• Proven experience in performing and leading detailed source code reviews, with a strong understanding of secure coding practices.
• Desirable certifications like CREST, OSCP, or similar recognized penetration testing qualifications.
• In-depth knowledge of common security vulnerabilities
• Strong report writing and documentation skills, with the ability to explain technical issues to non-technical stakeholders.

EA License: 22C1396
EA Personnel: R1551466