Penetration Tester

Kris Infotech : Technology & Talent - Synced; Singapore; On-site; SGD 70,000 - 110,000; Full time

Job summary

Kris Infotech : Technology & Talent - Synced is seeking a security-focused professional to perform internal vulnerability assessments and lead penetration testing efforts.

You will assess reports from researchers and tools, provide remediation guidance to teams, and stay abreast of emerging threats to mitigate risk across our environment.

2+ years experience required; strong knowledge of OWASP Top 10; OSCP/GWAPT/GPEN with red-team exposure preferred.

Qualifications

• At least 2 years of penetration testing experience.
• Strong understanding of vulnerabilities and remediation techniques (OWASP Top 10).
• Experience with attack simulation, penetration testing, red teaming or other offensive security testing.
• Skilled in root cause analysis for vulnerabilities and determining technical solutions.
• Proficient in handling large datasets and performing detailed vulnerability analysis.
• Detail-oriented with excellent written communication skills.
• Preferred certifications such as OSCP, OSCE, GPEN, GWAPT, GXPN or equivalent.

Responsibilities

• Perform internal vulnerability assessments and penetration testing and ensuring the remediation progress of identified issues.
• Assess and analyse vulnerability reports from security researchers, vendors, and tools to understand their implications on our environment
• Offer expert advice and recommendations to different teams on how to remediate vulnerabilities effectively.
• Supports penetrating testing initiatives.
• Keep updated with the latest cyber threats, vulnerabilities, attack methods, and threat intelligence; evaluate their impact on the company network and systems, and initiate threat mitigation actions and advisories.

Skills

Penetration testing

Vulnerability assessment

OWASP Top 10

Red teaming / offensive security

Root cause analysis

Data analysis

Technical writing

Certifications preferred

Job description

Key Responsibilities:

• Perform internal vulnerability assessments and penetration testing and ensuring the remediation progress of identified issues.


• Assess and analyse vulnerability reports from security researchers, vendors, and tools to understand their implications on our environment


• Offer expert advice and recommendations to different teams on how to remediate vulnerabilities effectively.


• Supports penetrating testing initiatives.


• Keep updated with the latest in cyber threats, vulnerabilities, attack methods, and threat intelligence; evaluate their impact on the company network and systems, and initiate threat mitigation actions and advisories.

Requirements:

• At least 2 years of experience in penetration testing.


• Strong understanding of common vulnerabilities and remediation techniques (e.g. OWASP Top 10).


• Experience with attack simulation, penetration testing, red teaming or other offensive security testing.


• Skilled in conducting root cause analysis for vulnerabilities and determining appropriate technical solutions.


• Proficient in handling large datasets and performing detailed vulnerability analysis.


• Detail-oriented with excellent analytical and written communication skills.


• Preferred candidates with certifications such as OSCP, OSCE, GPEN, GWAPT, GXPN or equivalent