SECURITY CONSULTANT (Penetration Testing)

Atos SE; Singapore; On-site; SGD 90,000 - 150,000; Full time

Job summary

Atos SE in Singapore is seeking a Security Consultant (Penetration Testing) to assess mobile and web applications, review code, and bypass security controls to identify vulnerabilities.

The role requires hands-on testing experience, knowledge of iOS/Android security, and experience with reverse engineering tools and Burp extensions. Join a global leader in cybersecurity and secure digital transformations.

Qualifications

• Strong hands-on experience performing compliance testing of mobile applications that meet certain Technology Security Standards and regulatory/industries requirements, eg MAS TRM, OWASP MSTG
• In-depth knowledge of iOS/android architecture, including their underlying security mechanisms
• Experienced with performing secure code review of Swift / Kotlin/Objective-C and Java applications.
• Proficient with various reverse engineering tools such as IDA Pro, Ghidra, as well as Frida.re hooking framework or equivalent.
• Knowledge of ARM architectures (armeabi-v7a, arm64-v8a, etc) an advantage.
• Experience analyzing and bypassing various security mechanisms commonly present in mobile applications (SSL pinning, root/jailbreak detection, anti-tampering, in-app VPN, etc).
• Ability to develop BURP extensions to aid with mobile and web application tests.
• Solid experience conducting Web Application Penetration tests following industry standards methodologies.
• Ability to conduct comprehensive source code reviews across multiple languages (mobile, web, backend).
• Web & Infrastructure Security Testing

Responsibilities

• Perform mobile application security testing following industry standards.
• Conduct secure code reviews across Swift, Kotlin, Objective-C and Java.
• Analyze and bypass security controls such as SSL pinning and root/jailbreak detection.
• Develop BURP extensions to assist tests.
• Lead web application and infrastructure security testing engagements.

Skills

Mobile security testing

Web application testing

Source code review

Team communication

Independent work

Education

Bachelor's degree in CS/Info Sec

Tools

IDA Pro

Ghidra

Frida

Burp Suite

Job description

Location: Singapur, SG

SECURITY CONSULTANT (Penetration Testing)

Atos is the Atos Group brand dedicated to AI-powered, secure, end-to-end digital services. Atos designs, develops, and operates critical digital environments that drive performance, resilience and sovereignty, helping public and private organizations worldwide retain control over their data and infrastructures, while meeting regulatory requirements.

With more than 52,000 employees serving over 4,500 clients across 54 countries, Atos helps modernize core IT systems, accelerate cloud and data transformation, strengthen cybersecurity, and deliver secure digital workplace environments to support its clients, its employees and society. Atos also provides consulting and advisory services through its Atos Amplify brand.
A trusted partner in operating complex and mission-critical environments, Atos supports organizations across highly regulated and sovereign contexts.

Atos Group is a global leader in digital transformation with c. 54,000 employees and annual revenue of c. €7.2 billion, operating in 54 countries under two brands - Atos for services and Eviden for products and systems. European number one in cybersecurity and a leader in cloud, Atos Group is committed to a secure and decarbonized future and provides tailored AI-powered, end-to-end solutions for all industries. Atos Group is listed on Euronext Paris.

Security Consultant

Core Responsibilities & Technical Requirements

• Strong hands-on experience performing compliance testing of mobile applications that meet certain Technology Security Standards and regulatory/industries requirements, eg MAS TRM, OWASP MSTG
• In-depth knowledge of iOS/android architecture, including their underlying security mechanisms
• Experienced with performing secure code review of Swift / Kotlin/Objective-C and Java applications.
• Proficient with various reverse engineering tools such as IDA Pro, Ghidra, as well as Frida.re hooking framework or equivalent.
• Knowledge of RM architectures (armeabi-v7a, arm64-v8a, etc) an advantage.
• Experience analyzing and bypassing various security mechanisms commonly present in mobile applications (SSL pinning, root/jailbreak detection, anti [tampering, in-app VPN, etc).
• Ability to develop BURP extensions to aid with mobile and web application tests.
• Solid experience conducting Web Application Penetration tests following industry standards methodologies.
• Ability to conduct comprehensive source code reviews across multiple languages (mobile, web, backend).
• Web & Infrastructure Security Testing

Qualifications & Skills

• Bachelor’s degree in Computer Science, Information Security, or related discipline.
• Minimum 2 years of hands-on penetration testing or relevant offensive security experience.
• Additional certifications such as OSCP, OSCE, OSEE, OSWE, Red Teaming, Cloud Security, Artificial Intelligence security credentials are advantageous.
• Excellent oral and written communication skills, including the ability to present technical findings.
• Strong organizational and time management skills; able to manage multiple engagements and meet tight deadlines.
• Self-motivated, proactive and able to work independently or as part of a team.

Here at Atos, diversity and inclusion are embedded in our DNA. Read more about our commitment to a fair work environment for all.

Atos is a recognized leader in its industry across Environment, Social and Governance (ESG) criteria. Find out more on our CSR commitment.