Penetration Tester: Web, App & Cloud Security

SCIENTE; Singapore; On-site; SGD 60,000 - 100,000; Full time

Job summary

SCIENTE Singapore is seeking a skilled Penetration Tester to identify and exploit security weaknesses across networks, applications, and cloud environments using ethical hacking techniques.

You will deliver detailed risk assessments and actionable remediation guidance, join cross-functional security teams, and stay current with evolving threats while maintaining high standards of reporting and documentation.

Qualifications

• Diploma/Degree in Cybersecurity, Computer Science, Information Technology.
• 3+ years of hands-on penetration testing experience.
• Strong knowledge of OWASP Top 10 and web vulnerabilities.
• Experience with Linux and Windows environments.
• Active Directory knowledge including privilege escalation.

Responsibilities

• Conduct pen testing across web apps, APIs, networks, infrastructure and cloud environments.
• Perform vulnerability assessment and validate findings through controlled exploitation.
• Identify security weaknesses including OWASP Top 10 and auth flaws.
• Conduct internal/external network pen testing and assess controls.
• Develop scripts/tools to support testing and report findings.

Skills

Penetration testing

Web testing

Network security basics

Linux/Windows

AD/privilege escalation

Scripting (Python/PowerShell/Bash)

Security testing tools

Reporting & risk assessment

Education

Diploma/Degree in Cybersecurity | Computer Science | Information Technology

Tools

Burp Suite

Nmap

Metasploit

Kali Linux

Wireshark

BloodHound

Impacket

Nessus

Job description

SCIENTE Singapore is seeking a skilled Penetration Tester to identify and exploit security weaknesses across networks, applications, and cloud environments using ethical hacking techniques.

You will deliver detailed risk assessments and actionable remediation guidance, join cross-functional security teams, and stay current with evolving threats while maintaining high standards of reporting and documentation.