Security Penetration Tester - Mobile & Web

BGC GROUP PTE. LTD.; Singapore; On-site; SGD 70,000 - 110,000; Full time

Job summary

BGC GROUP PTE. LTD. is seeking a security specialist to perform comprehensive security assessments across mobile, web, and backend applications.

You will conduct mobile testing for iOS/Android, perform secure code reviews, and analyse protections while leveraging reverse engineering and dynamic analysis tools. Ideal candidates have 2+ years in penetration testing or application security, strong communication skills, and CREST CRT certification; additional security certs are highly valued.

Qualifications

• Degree in Computer Science, Cybersecurity, Information Security, or related discipline.
• At least 2 years hands-on experience in penetration testing, offensive security, or application security.
• Strong understanding of mobile application security for iOS and Android.
• Experience reviewing code in Swift, Kotlin, Objective-C, Java, or similar.
• Familiarity with reverse engineering and mobile security testing tools (IDA Pro, Ghidra, Frida).
• Knowledge of mobile processor architectures and app internals is advantageous.
• Experience web app pen testing and secure code reviews across stacks.
• Mandatory CREST CRT certification; additional certs like OSCP/OSWE/OSCE/OSEE are highly regarded.
• Excellent communication and report-writing skills; able to present findings to technical and non-technical stakeholders.
• Strong organisational skills to manage multiple assignments independently.

Responsibilities

• Perform security assessments and penetration testing across mobile, web, and backend applications.
• Conduct mobile app security testing on iOS and Android; identify vulnerabilities and remediation.
• Perform secure code reviews for mobile and web apps across languages.
• Analyse security controls and protections (SSL/TLS pinning, root/jailbreak detection, anti-tampering, runtime protections).
• Use reverse engineering and dynamic analysis tools to support assessments.
• Develop or customize security testing tools to improve efficiency.
• Conduct web app penetration testing using recognised methodologies.
• Perform source code reviews to identify security weaknesses.
• Participate in infrastructure and network security assessments as needed.
• Prepare technical reports with remediation recommendations for stakeholders.

Skills

Penetration testing

Mobile security

Secure code reviews

Reverse engineering

Dynamic analysis

CREST CRT

OSCP

OSWE

Education

Bachelor degree in CS/Cybersecurity

Tools

IDA Pro

Ghidra

Frida

Job description

BGC GROUP PTE. LTD. is seeking a security specialist to perform comprehensive security assessments across mobile, web, and backend applications.

You will conduct mobile testing for iOS/Android, perform secure code reviews, and analyse protections while leveraging reverse engineering and dynamic analysis tools. Ideal candidates have 2+ years in penetration testing or application security, strong communication skills, and CREST CRT certification; additional security certs are highly valued.