Penetration Tester - Mobile & Web Security (Singapore)

Atos SE; Singapore; On-site; SGD 90,000 - 150,000; Full time

Job summary

Atos SE in Singapore is seeking a Security Consultant (Penetration Testing) to assess mobile and web applications, review code, and bypass security controls to identify vulnerabilities.

The role requires hands-on testing experience, knowledge of iOS/Android security, and experience with reverse engineering tools and Burp extensions. Join a global leader in cybersecurity and secure digital transformations.

Qualifications

• Strong hands-on experience performing compliance testing of mobile applications that meet certain Technology Security Standards and regulatory/industries requirements, eg MAS TRM, OWASP MSTG
• In-depth knowledge of iOS/android architecture, including their underlying security mechanisms
• Experienced with performing secure code review of Swift / Kotlin/Objective-C and Java applications.
• Proficient with various reverse engineering tools such as IDA Pro, Ghidra, as well as Frida.re hooking framework or equivalent.
• Knowledge of ARM architectures (armeabi-v7a, arm64-v8a, etc) an advantage.
• Experience analyzing and bypassing various security mechanisms commonly present in mobile applications (SSL pinning, root/jailbreak detection, anti-tampering, in-app VPN, etc).
• Ability to develop BURP extensions to aid with mobile and web application tests.
• Solid experience conducting Web Application Penetration tests following industry standards methodologies.
• Ability to conduct comprehensive source code reviews across multiple languages (mobile, web, backend).
• Web & Infrastructure Security Testing

Responsibilities

• Perform mobile application security testing following industry standards.
• Conduct secure code reviews across Swift, Kotlin, Objective-C and Java.
• Analyze and bypass security controls such as SSL pinning and root/jailbreak detection.
• Develop BURP extensions to assist tests.
• Lead web application and infrastructure security testing engagements.

Skills

Mobile security testing

Web application testing

Source code review

Team communication

Independent work

Education

Bachelor's degree in CS/Info Sec

Tools

IDA Pro

Ghidra

Frida

Burp Suite

Job description

Atos SE in Singapore is seeking a Security Consultant (Penetration Testing) to assess mobile and web applications, review code, and bypass security controls to identify vulnerabilities.

The role requires hands-on testing experience, knowledge of iOS/Android security, and experience with reverse engineering tools and Burp extensions. Join a global leader in cybersecurity and secure digital transformations.