Penetration Tester

PERCEPT SOLUTIONS PTE. LTD.; Singapore; On-site; SGD 60,000 - 100,000; Full time

Job summary

Percept Solutions PTE. LTD. is seeking a Penetration Tester to support the AWPT programme by triaging vulnerabilities, assessing risk, validating remediations, and coordinating with stakeholders.

The role includes improving Jira workflows, automation, dashboards, and reporting to manage vulnerabilities across their lifecycle. Candidates must have at least 1 year of hands-on penetration testing experience and practical knowledge of vulnerability management, risk assessment, and application

Qualifications

• Minimum 1 year of hands-on penetration testing experience.
• Practical experience in vulnerability management, triage, prioritisation and risk assessment.
• Working knowledge of application security and common vulnerabilities, and remediation approaches.
• Ability to assess exploitability and distinguish valid findings from false positives.
• Experience using Jira for vulnerability tracking, workflow management, dashboards, and reporting.
• Ability to review code changes, logs, and supporting evidence to validate remediation.
• Strong stakeholder management and communication with application teams and management.

Responsibilities

• Enhance vulnerability triage workflows and automation within Jira.
• Develop dashboards and reports to monitor vulnerability status, remediation progress, and lifecycle performance.
• Implement automation to improve finding correlation, duplicate identification, and tracking.
• Support integration with AI-powered penetration testing tools.
• Review findings from AI tools, prioritise by exploitability and impact, and coordinate remediation with teams.
• Retest vulnerabilities and validate the effectiveness of fixes.
• Produce governance reports and metrics for management updates.

Skills

Vulnerability management

Triage & risk assessment

Application security

Penetration testing

Stakeholder management

Tools

Jira

Job description

We are seeking a Penetration Tester to support the AWPT programme through vulnerability triage, risk assessment, remediation validation, and stakeholder coordination. The role includes improving Jira workflows, automation, dashboards, and reporting to manage vulnerabilities throughout their lifecycle.

Candidates must have at least 1 year of hands-on penetration testing experience.

Key Responsibilities:

• Enhance vulnerability triage workflows and automation capabilities within Jira.
• Develop dashboards and reports to monitor vulnerability status, remediation progress, and lifecycle performance.
• Implement automation to improve finding correlation, duplicate identification, and tracking.
• Support integration with AI-powered penetration testing tools.

Workflow Development & Automation:

• Review and triage findings generated by AI-powered penetration testing tools.
• Assess exploitability, severity, technical impact, and business impact to prioritise vulnerabilities.
• Identify false positives and duplicate findings using supporting evidence.
• Coordinate with application teams to review findings, agree on remediation plans, and resolve technical queries.
• Review code changes, application logs, and supporting evidence to assess remediation.
• Retest vulnerabilities and validate the effectiveness of fixes.
• Recommend closure, risk acceptance, or severity adjustments based on evidence and established approval processes.

Process Management & Governance:

• Manage vulnerability tracking in Jira from identification through remediation and closure.
• Coordinate stakeholders and facilitate the resolution of outstanding issues.
• Escalate critical, disputed, or overdue vulnerabilities.
• Produce vulnerability governance reports and metrics.
• Support management updates with clear reporting on risks, remediation progress, and unresolved issues.

Requirements:

• Minimum 1 year of hands-on penetration testing experience, including identifying, validating, and retesting security vulnerabilities.
• Practical experience in vulnerability management, triage, prioritisation, and risk assessment.
• Working knowledge of application security, common application vulnerabilities, and remediation approaches.
• Ability to assess exploitability and distinguish valid findings from false positives.
• Experience using Jira for vulnerability tracking, workflow management, dashboards, and reporting.
• Ability to review code changes, logs, and technical evidence to validate remediation.
• Strong stakeholder management and communication skills, with the ability to work effectively with application teams and management.

Preferred Experience:

• Jira administration and workflow automation.
• Integration of security tools with vulnerability management workflows.
• Exposure to AI-powered penetration testing tools.
• Development of vulnerability governance metrics and management reports.

Skills Priority:

• Vulnerability Management, Triage & Risk Assessment
• Application Security
• Penetration Testing
• Jira Administration & Workflow Management
• Stakeholder Management

EA Licence No.:18S9405 / EA Reg. No.:R1330864

Percept Solutions is expanding and actively seeking talented individuals. We encourage applicants to follow Percept Solutions on LinkedIn at https://www.linkedin.com/company/percept-solutions/ to stay informed about new opportunities and events.