Security Consultant (Penetration Testing)

Atos; Singapore; On-site; SGD 70,000 - 110,000; Full time

Job summary

Atos in Singapore seeks a security-focused mobile and web penetration tester to support compliance testing of mobile apps and security assessments across platforms. You will review Swift/Kotlin/Objective-C and Java code, test web and infrastructure security, and help improve testing methodologies.

The role requires 2+ years in offensive security, strong communication, and the ability to work independently or with a team; certifications such as OSCP/OSCE/OSWE are advantageous, with hands-on tools

Qualifications

• Bachelor’s degree in Computer Science, Information Security, or related discipline.
• Minimum 2 years of hands-on penetration testing or relevant offensive security experience.
• Certifications such as OSCP, OSCE, OSEE, OSWE, Red Teaming, Cloud Security, AI security credentials are advantageous.
• Excellent oral and written communication skills.
• Strong organizational and time management skills; able to manage multiple engagements and meet tight deadlines.
• Self-motivated, proactive and able to work independently or as part of a team.

Responsibilities

• Strong hands-on experience performing compliance testing of mobile applications that meet Technology Security Standards and regulatory requirements.
• In-depth knowledge of iOS/Android architecture and underlying security mechanisms.
• Perform secure code reviews of Swift/Kotlin/Objective-C and Java applications.
• Develop BURP extensions to aid mobile and web application tests.
• Conduct Web Application Penetration tests following industry standards methodologies.
• Conduct comprehensive source code reviews across mobile, web, and backend languages.
• Web & Infrastructure Security Testing.

Skills

Penetration testing

Mobile security testing

Secure code review

Communication skills

Time management

Independence

Team collaboration

Education

Bachelor’s degree in Computer Science / Information Security

Tools

IDA Pro

Ghidra

Frida

Job description

Core Responsibilities & Technical Requirements

• Strong hands-on experience performing compliance testing of mobile applications that meet certain Technology Security Standards and regulatory/industries requirements, eg MAS TRM, OWASP MSTG
• In-depth knowledge of iOS/android architecture, including their underlying security mechanisms
• Experienced with performing secure code review of Swift / Kotlin/Objective-C and Java applications.
• Proficient with various reverse engineering tools such as IDA Pro, Ghidra, as well as Frida.re hooking framework or equivalent.
• Knowledge of RM architectures (armeabi-v7a, arm64-v8a, etc) an advantage.
• Experience analyzing and bypassing various security mechanisms commonly present in mobile applications (SSL pinning, root/jailbreak detection, anti [tampering, in-app VPN, etc).
• Ability to develop BURP extensions to aid with mobile and web application tests.
• Solid experience conducting Web Application Penetration tests following industry standards methodologies.
• Ability to conduct comprehensive source code reviews across multiple languages (mobile, web, backend).
• Web & Infrastructure Security Testing

Qualifications & Skills

• Bachelor’s degree in Computer Science, Information Security, or related discipline.
• Minimum 2 years of hands-on penetration testing or relevant offensive security experience. .
• Additional certifications such as OSCP, OSCE, OSEE, OSWE, Red Teaming, Cloud Security, Artificial Intelligence security credentials are advantageous.
• Excellent oral and written communication skills, including the ability to present technical findings.
• Strong organizational and time management skills; able to manage multiple engagements and meet tight deadlines.
• Self-motivated, proactive and able to work independently or as part of a team.