Penetration Tester

KRIS INFOTECH PTE. LTD.; Singapore; On-site; SGD 90,000 - 130,000; Full time

Job summary

KRIS INFOTECH PTE. LTD. in Singapore is seeking a security professional to perform internal vulnerability assessments and penetration testing, driving remediation progress across the environment.

You will analyze vulnerability reports, advise teams on fixes, and keep abreast of the latest threats and techniques, applying practical solutions to strengthen defenses. A focus on detailed analysis, strong written communication, and relevant certifications will help you succeed in this role.

Qualifications

• 2+ years of experience in penetration testing.
• Strong understanding of OWASP Top 10 and remediation techniques.
• Experience with attack simulation, red teaming or offensive security testing.

Responsibilities

• Perform internal vulnerability assessments and penetration testing and ensuring the remediation progress of identified issues.
• Assess and analyse vulnerability reports from security researchers, vendors, and tools to understand their implications on our environment.
• Offer expert advice and recommendations to different teams on how to remediate vulnerabilities effectively.
• Supports Company’s penetrating testing initiatives.
• Keep updated with the latest in cyber threats, vulnerabilities, attack methods, and threat intelligence; evaluate their impact on the Company network and systems, and initiate threat mitigation actions and advisories.

Skills

Penetration testing

Vulnerability assessment

Threat intelligence

Root cause analysis

Data analysis

Job description

Job Description:

• Perform internal vulnerability assessments and penetration testing and ensuring the remediation progress of identified issues.
• Assess and analyse vulnerability reports from security researchers, vendors, and tools to understand their implications on our environment.
• Offer expert advice and recommendations to different teams on how to remediate vulnerabilities effectively.
• Supports Company’s penetrating testing initiatives.
• Keep updated with the latest in cyber threats, vulnerabilities, attack methods, and threat intelligence; evaluate their impact on the Company network and systems, and initiate threat mitigation actions and advisories.

Requirements:

• At least 2 years of experience in penetration testing.
• Strong understanding of common vulnerabilities and remediation techniques (e.g. OWASP Top 10).
• Experience with attack simulation, penetration testing, red teaming or other offensive security testing.
• Skilled in conducting root cause analysis for vulnerabilities and determining appropriate technical solutions.
• Proficient in handling large datasets and performing detailed vulnerability analysis.
• Detail-oriented with excellent analytical and written communication skills.
• Preferred candidates with certifications such as OSCP, OSCE, GPEN, GWAPT, GXPN or equivalent.