SECURITY CONSULTANT (Penetration Testing)

Atos Information Technology (S) Pte Ltd; Singapore; On-site; SGD 90,000 - 130,000; Full time

Job summary

Atos Information Technology (S) Pte Ltd is seeking a Security Consultant to perform compliance testing and security assessments of mobile apps and web services. You will review code, identify vulnerabilities, and develop testing tools across platforms.

The role requires hands-on security testing experience, strong knowledge of iOS/Android security, and certifications like CREST CRT. A proactive, independent worker who can manage multiple engagements is essential for success.

Qualifications

• Bachelor’s degree in Computer Science, Information Security, or related discipline.
• Minimum 2 years of hands-on penetration testing or relevant offensive security experience.
• Additional certifications such as OSCP, OSCE, OSEE, OSWE, Red Teaming, Cloud Security, Artificial Intelligence security credentials are advantageous.
• Excellent oral and written communication skills, including the ability to present technical findings.
• Strong organizational and time management skills; able to manage multiple engagements and meet tight deadlines.
• Self-motivated, proactive and able to work independently or as part of a team.

Responsibilities

• Strong hands-on experience performing compliance testing of mobile applications meeting Technology Security Standards and regulatory requirements (MAS TRM, OWASP MSTG).
• Deep knowledge of iOS/Android security architecture.
• Experience with secure code review of Swift/Kotlin/Obj-C/Java applications.
• Proficient with reverse engineering tools (IDA Pro, Ghidra, Frida).
• Familiar with RM architectures (arm variants).
• Experience bypassing security mechanisms (SSL pinning, root/jailbreak).
• Develop BURP extensions for tests.
• Web app penetration testing experience.
• Source code reviews across mobile, web, backend.
• Web & infrastructure security testing.

Skills

Excellent communication skills

Time management skills

Independent work

Education

Bachelor’s degree in Computer Science, Information Security, or related discipline

Tools

CREST CRT certification

Job description

Atosis the Atos Group brand dedicated to AI-powered, secure, end-to-end digital services. Atos designs, develops, and operates critical digital environments that drive performance, resilience and sovereignty, helping public and private organizations worldwide retain control over their data and infrastructures, while meeting regulatory requirements.

With more than 52,000 employees serving over 4,500 clients across 54 countries, Atos helps modernize core IT systems, accelerate cloud and data transformation, strengthen cybersecurity, and deliver secure digital workplace environments to support its clients, its employees and society. Atos also provides consulting and advisory services through its Atos Amplify brand.
A trusted partner in operating complex and mission-critical environments, Atos supports organizations across highly regulated and sovereign contexts.

About Atos Group

Atos Group is a global leader in digital transformation with c. 54,000 employees and annual revenue of c. €7.2 billion, operating in 54 countries under two brands - Atos for services and Eviden for products and systems. European number one in cybersecurity and a leader in cloud, Atos Group is committed to a secure and decarbonized future and provides tailored AI-powered, end-to-end solutions for all industries. Atos Group is listed on Euronext Paris.

Security Consultant

Core Responsibilities & Technical Requirements

• Strong hands-on experience performing compliance testing of mobile applications that meet certain Technology Security Standards and regulatory/industries requirements, eg MAS TRM, OWASP MSTG
• In-depth knowledge of iOS/android architecture, including their underlying security mechanisms
• Experienced with performing secure code review of Swift / Kotlin/Objective-C and Java applications.
• Proficient with various reverse engineering tools such as IDA Pro, Ghidra, as well as Frida.re hooking framework or equivalent.
• Knowledge of RM architectures (armeabi-v7a, arm64-v8a, etc) an advantage.
• Experience analyzing and bypassing various security mechanisms commonly present in mobile applications (SSL pinning, root/jailbreak detection, anti [tampering, in-app VPN, etc).
• Ability to develop BURP extensions to aid with mobile and web application tests.
• Solid experience conducting Web Application Penetration tests following industry standards methodologies.

• Ability to conduct comprehensive source code reviews across multiple languages (mobile, web, backend).
• Web & Infrastructure Security Testing

Qualifications & Skills

• Bachelor’s degree in Computer Science, Information Security, or related discipline.
• Minimum 2 years of hands-on penetration testing or relevant offensive security experience. .
• CREST CRT certification mandatory.
• Additional certifications such as OSCP, OSCE, OSEE, OSWE, Red Teaming, Cloud Security, Artificial Intelligence security credentials are advantageous.
• Excellent oral and written communication skills, including the ability to present technical findings.
• Strong organizational and time management skills; able to manage multiple engagements and meet tight deadlines.
• Self-motivated, proactive and able to work independently or as part of a team.

Here at Atos, diversity and inclusion are embedded in our DNA. Read more about our commitment to a fair work environment for all.

Atos is a recognized leader in its industry across Environment, Social and Governance (ESG) criteria. Find out more on our CSR commitment.

Choose your future. Choose Atos.