Penetration Tester & Security Researcher — Hybrid (Singapore)

Planet Nine; Singapore; Hybrid; SGD 120,000 - 180,000; Full time

Job summary

BNF SG in Singapore is seeking a Mid-to-Senior Penetration Tester & Security Researcher to tackle complex security challenges across web apps, infrastructure, cloud/Kubernetes, AI systems, mobile apps, and source code. We expect researchers to dig deep beyond standard testing and produce real security research.

You’ll report to the Team Lead and collaborate with a small, international team on live client engagements, applying independent thinking and a proactive approach to identify risks and

Qualifications

• 3+ years of hands-on experience in penetration testing and/or security research.
• Deep expertise in web app, infrastructure/network, and code review.
• OSCP or CREST CRT certification mandatory.
• Based in Singapore with valid work authorization.
• Hybrid work model in Singapore.

Responsibilities

• Conduct penetration testing and security research across web applications, infrastructure and networks, cloud and Kubernetes environments, AI systems, mobile applications, and source code.
• Take ownership of security reporting. Use AI tools to accelerate drafting, but ensure final output is technically accurate with root-cause analysis and business impact.
• Present vulnerabilities, findings, and recommendations clearly to clients and their technical teams.
• Build internal security tools, methodologies, automation, and agentic workflows that enable the team to work faster and go deeper.
• Contribute to red team and adversary emulation engagements.
• Independently investigate unfamiliar technologies, attack surfaces, and complex technical problems.

Skills

Penetration testing

Security research

Web app pen testing

Infrastructure pen testing

Source code review

AI-enabled security testing

Independent working

English communication

Education

OSCP or CREST CRT certification

Bachelor's degree in CS/InfoSec/Engineering or equivalent

Tools

Python

Node.js

Job description

BNF SG in Singapore is seeking a Mid-to-Senior Penetration Tester & Security Researcher to tackle complex security challenges across web apps, infrastructure, cloud/Kubernetes, AI systems, mobile apps, and source code. We expect researchers to dig deep beyond standard testing and produce real security research.

You’ll report to the Team Lead and collaborate with a small, international team on live client engagements, applying independent thinking and a proactive approach to identify risks and