Security Testing Specialist

OCBC; Singapore; On-site; SGD 120,000 - 180,000; Full time

Job summary

OCBC invites seasoned security testers to join our Cyber Security team in Singapore. You will perform application, mobile, and network penetration testing, identify vulnerabilities, and work with engineering teams to mitigate risks.

We value proactive, collaborative professionals with 3+ years of hands-on testing, secure code review experience, and relevant certifications. Knowledge of MAS TRMG is a plus; experience with banks in Singapore is highly preferred.

Qualifications

• 3+ years of hands-on penetration testing for web, mobile, and APIs.
• Experience conducting Secure Code Review.
• Degree in computer science/computer engineering/information security or equivalent.
• Working knowledge of information security essentials.
• Familiarity with MAS TRMG and regulatory requirements.
• Good communication skills; able to work independently and in a team.
• Certifications from GIAC/Offensive Security/CREST required.
• Hands-on with Kali Linux and security testing tools (Burp, Tenable).
• Experience testing Banks in Singapore preferred.
• AS400/legacy mainframe code review experience a plus.

Responsibilities

• Perform application penetration testing on web-based applications, APIs.
• Perform mobile application penetration testing across different mobile platforms.
• Perform network penetration testing on systems.
• Exploit vulnerabilities to gain access and expand access to remote systems.
• Document and explain security issues identified during assessments and recommend mitigations.
• Research cutting-edge security topics and attack vectors.
• Conduct compliance testing against Security Standards and MAS TRMG requirements.
• Conduct secure code reviews when required.
• Perform thick client penetration testing when required.

Skills

Penetration testing

Kali Linux

Burp Suite

Secure Code Review

Threat modeling

Team collaboration

Education

Bachelor’s degree in CS/CE/Info Security

Tools

Tenable

Job description

Who We Are

As Singapore’s longest established bank, we have been dedicated to enabling individuals and businesses to achieve their aspirations since 1932. How? By taking the time to truly understand people. From there, we provide support, services, solutions, and career paths that meet their individual needs and desires.

Who We Are

As Singapore’s longest established bank, we have been dedicated to enabling individuals and businesses to achieve their aspirations since 1932. How? By taking the time to truly understand people. From there, we provide support, services, solutions, and career paths that meet their individual needs and desires.

Today, we’re on a journey of transformation. Leveraging technology and creativity to become a future-ready learning organisation.

But for all that change, our strategic ambition is consistently clear and bold, which is to be Asia’s leading financial services partner for a sustainable future.

We invite you to build the bank of the future. Innovate the way we deliver financial services. Work in friendly, supportive teams. Build lasting value in your community. Help people grow their assets, business, and investments. Take your learning as far as you can. Or simply enjoy a vibrant, future-ready career.

Your Opportunity Starts Here.

Why Join

Protecting our customers' assets and data is at the heart of everything we do at OCBC. As a Security Testing Specialist, you'll play a critical role in safeguarding our systems and networks from cyber threats. You'll be part of a team that's shaping the future of cybersecurity in the financial industry.

How you succeed

To succeed in this role, you'll need to stay one step ahead of emerging threats. You'll work closely with our engineering teams to identify and mitigate risks, and develop strategies to protect our systems and data. You'll need to be proactive, collaborative, and always looking for ways to improve our cybersecurity posture.

What you do

• Perform application penetration testing on web-based applications, APIs
• Perform mobile application penetration testing across different mobile platforms
• Perform network penetration testing on systems.
• Exploit vulnerabilities to gain access and expand access to remote systems.
• Document and explain the technical details of the security issues identified during security assessments and recommend mitigation controls for remediation.
• Research cutting edge security topics and new attack vectors
• Conduct compliance testing on web-based application, mobile applications and thick/thin-client application that meet predetermined Technology Security Standards and other regulatory requirements such as MAS TRMG.
• Conduct secure code review when required
• Perform thick client penetration testing when required

Who you are

• Minimum 3 years of hands‑on penetration testing experience for web applications, mobile applications, and APIs
• Experience conducting Secure Code Review
• Degree in computer science/computer engineering/information security or equivalent.
• A working knowledge of all aspects of information security is essential.
• Familiarity of MAS TRMG and other regulatory/industries requirements.
• Good communication (spoken and written) skills, able to work independently and as a team
• Certifications from either GIAC/Offensive Security/CREST required.
• Hands on experience in using Kali Linux, tools such as Burp, Tenable and other penetration testing, and secure code review tools
• Experience in conducting penetration testing for Banks in Singapore will be highly preferred
• Experience in conducting code review for AS400 and legacy mainframe systems will be an advantage

Who we are

As Singapore's longest established bank, we have been dedicated to enabling individuals and businesses to achieve their aspirations since 1932. How? By taking the time to truly understand people. From there, we provide support, services, solutions, and career paths that meet their individual needs and desires.

Today, we're on a journey of transformation. Leveraging technology and creativity to become a future-ready learning organisation.

But for all that change, our strategic ambition is consistently clear and bold, which is to be Asia's leading financial services partner for a sustainable future.

We invite you to build the bank of the future. Innovate the way we deliver financial services. Work in friendly, supportive teams. Build lasting value in your community. Help people grow their assets, business, and investments. Take your learning as far as you can. Or simply enjoy a vibrant, future-ready career. Your Opportunity Starts Here.

What we offer

Competitive base salary. A suite of holistic, flexible benefits to suit every lifestyle. Community initiatives. Industry-leading learning and professional development opportunities. Equal opportunity. Fair employment. Selection based on ability and fit with our culture and values. Your wellbeing, growth and aspirations are every bit as cared for as the needs of our customers.

What We Offer

Competitive base salary. A suite of holistic, flexible benefits to suit every lifestyle. Community initiatives. Industry-leading learning and professional development opportunities. Your wellbeing, growth and aspirations are every bit as cared for as the needs of our customers.