Penetration testing specialist

Consulguru Pte. Ltd.; Singapore; On-site; SGD 60,000 - 120,000; Full time

Job summary

Consulguru Pte. Ltd.

is seeking a Security Tester to design and execute tests ensuring confidentiality, integrity, authentication, availability, authorization, and nonrepudiation for infrastructure, systems, and applications in Singapore. You will translate requirements into test plans, write tests, conduct penetration tests on web, mobile, APIs and networks, perform code reviews, run social engineering simulations, and document findings with risk assessments and remediation steps.

Qualifications

• Experience in security testing across web, mobile, API and network environments.
• Ability to translate security requirements into test plans and scripts.
• Familiarity with industry standards and best practices (e.g., OWASP, NIST).
• Strong analytical skills to identify and prioritize risks.
• Excellent communication to report findings to non‑technical stakeholders.

Responsibilities

• Design and execute security tests across infrastructure, systems and applications.
• Conduct penetration tests on web, mobile, APIs, and networks to identify vulnerabilities.
• Perform code reviews to uncover security flaws in software.
• Produce detailed reports explaining findings, risks, and remediation steps.

Skills

Penetration testing

Threat modeling

Security standards

Vulnerability assessment

Analytical thinking

Clear communication

High integrity

Job description

Design and perform tests and check cases to determine if infrastructure components, systems and applications meet confidentiality, integrity, authentication, availability, authorisation, and nonrepudiation standards.

Translate requirements into test plans, write and execute testscripts or codes in line with standards and procedures to determine vulnerability to attacks.

Certify infrastructure components, systems and applications that meet security standards.

Execute Security Assessments: Conduct thorough penetration tests across web apps, mobile apps, APIs, and network systems.

Simulate Cyberattacks: Safely exploit discovered vulnerabilities to see how far an attacker could penetrate.

Conduct Code Reviews: Inspect raw software source code to catch security design flaws early.

Perform Social Engineering: Run simulated phishing campaigns to test employee security awareness.

Write Technical Reports: Create detailed documentation explaining how flaws were found, their business risks, and how to fix them.

Build Automation Tools: Write custom scripts to make testing faster and more efficient.

Soft Skills & Traits

• Analytical Thinking: Exceptional problem-solving skills to find hidden flaws.
• Clear Communication: Ability to explain complex technical bugs to non-technical business managers.
• High Integrity: Strong ethical standards to handle highly sensitive data responsibly