Security Consultant [Crest Certified] ONSITE- Singapore.

Axiom Technologies; Singapore; On-site; SGD 60,000 - 90,000; Full time

Job summary

Axiom Technologies in Singapore is seeking a skilled professional for mobile application security testing. The role involves compliance testing, secure code review, and conducting penetration tests according to industry standards. Candidates should have a Bachelor’s degree in Computer Science, at least 2 years of penetration testing experience, and a CREST CRT certification. Additional certifications are advantageous. This position requires strong organizational skills and the ability to work both independently and in a team.

Qualifications

• Bachelor’s degree in Computer Science, Information Security, or related discipline.
• Minimum 2 years of hands-on penetration testing or relevant offensive security experience.
• CREST CRT certification mandatory.
• Excellent oral and written communication skills.
• Strong organizational and time management skills.
• Self-motivated, proactive, and able to work independently or as part of a team.

Responsibilities

• Compliance testing of mobile applications to meet Technology Security Standards.
• In-depth knowledge of iOS/Android architecture and security mechanisms.
• Perform secure code review of Swift / Kotlin / Objective-C and Java applications.
• Conduct Web Application Penetration tests following industry standards methodologies.
• Develop BURP extensions for testing mobile and web applications.

Job description

Axiom Technologiesis a Global IT Services partner supporting medium to large-scale enterprises. Please visit our website for more information about what we do at www.axiomtechnologies.com.

We are looking for a capable resource to coordinate, ranging from simple activities to more complex plans. This role will provide onsite/ on-call assistance to end-users within the organization’s desktop computing environment in a timely and accurate fashion to ensure optimal service delivery.

Key Responsibilities:

• Strong hands‑on experience performing compliance testing of mobile applications that meet certain Technology Security Standards and regulatory/industry requirements, eg MAS TRM, OWASP MSTG
• In-depth knowledge of iOS/Android architecture, including their underlying security mechanisms
• Experienced with performing secure code review of Swift / Kotlin/Objective-C and Java applications
• Proficient with various reverse engineering tools such as IDA Pro, Ghidra, as well as Frida, re-hooking framework, or equivalent.
• Knowledge of RM architectures (armeabi-v7a, arm64-v8a, etc) an advantage.
• Experience analyzing and bypassing various security mechanisms commonly present in mobile applications (SSL pinning, root/jailbreak detection, anti-tampering, in-app VPN, etc).
• Ability to develop BURP extensions to aid with mobile and web application tests.
• Solid experience conducting Web Application Penetration tests following industry standards methodologies.
• Ability to conduct comprehensive source code reviews across multiple languages (mobile, web, backend).
• Web & Infrastructure Security Testing

Qualifications & Skills Required:

Bachelor’s degree in Computer Science, Information Security, or related discipline.

• Minimum 2 years of hands‑on penetration testing or relevant offensive security experience.
• CREST CRT certification mandatory.
• Additional certifications such as OSCP, OSCE, OSEE, OSWE, Red Teaming, Cloud Security, and Artificial Intelligence security credentials are advantageous.
• Excellent oral and written communication skills, including the ability to present technical findings.
• Strong organizational and time management skills; able to manage multiple engagements and meet tight deadlines.
• Self-motivated, proactive, and able to work independently or as part of a team.

Preferred:

• Experience with macOS or Linux environments.
• IT certifications such as CompTIA A+, Network+, or Microsoft Certified: Modern Desktop Administrator.
• Experience with Active Directory, Group Policy, and remote management tools (e.g., SCCM, Intune, or JAMF).