Senior Cybersecurity Engineer (Python/Penetration Testing)

manpower staffing services (singapore) pte ltd; Singapore; On-site; SGD 120,000 - 180,000; Part time

Benefits offered by this job

Contract position

Extension potential

Singapore-based role

Job summary

manpower staffing services (singapore) pte ltd is seeking a seasoned Penetration Tester contractor to perform comprehensive security assessments of clients’ systems, networks, and applications from Singapore. The role emphasizes hands-on exploitation, vulnerability identification, and remediation guidance for a variety of environments.

The ideal candidate will have 5+ years of hands-on attack- and defense-focused testing, OSCP certification, and strong reporting and presentation skills.

Qualifications

• 5+ years of hands-on penetration testing and vulnerability assessment.
• OSCP certification is mandatory.
• Strong understanding of OWASP Top 10 and exploit techniques.
• Excellent communication and report-writing skills.
• Ability to work independently and in teams.

Responsibilities

• Conduct penetration testing and vulnerability assessments on apps, networks, and infrastructure.
• Identify and exploit vulnerabilities using manual and automated techniques.
• Develop and maintain testing methodologies and procedures.
• Document findings with detailed remediation steps in reports.
• Present findings to technical and non-technical audiences.
• Stay updated on threats, vulnerabilities, and attack techniques.
• Contribute to security tooling and automation scripts.
• Perform red team exercises to simulate real-world attacks.
• Adhere to ethical hacking principles and confidentiality.

Skills

Penetration testing

Strong communication skills

Independent worker

Education

OSCP certification

Tools

Python

Bash

Metasploit

Burp Suite

Nmap

Nessus

Job description

Job Summary

Our Client’s Information Security is seeking a highly motivated and experienced Penetration Tester to join our team as a contractor, based in Singapore. The successful candidate will be responsible for conducting comprehensive security assessments of our clients' systems, networks, and applications, identifying vulnerabilities, and providing actionable recommendations for remediation. This is a contract position with the potential for extension based on performance and business needs.

Responsibilities

• Conduct penetration testing and vulnerability assessments on web applications, networks, and infrastructure.
• Identify and exploit security vulnerabilities using a variety of manual and automated techniques.
• Develop and maintain penetration testing methodologies and procedures
• Document findings in clear, concise, and comprehensive reports, including detailed descriptions of vulnerabilities, potential impact, and recommended remediation steps.
• Present findings and recommendations to technical and non-technical audiences.
• Stay up-to-date on the latest security threats, vulnerabilities, and attack techniques.
• Contribute to the development of security tools and scripts to automate testing processes.
• Perform red team exercises to simulate real-world attacks and assess the effectiveness of security controls.
• Adhere to ethical hacking principles and maintain confidentiality of sensitive information.

Required Skills and Experience

• Minimum of 5+ years of experience in penetration testing and vulnerability assessment.
• Possession of Offensive Security Certified Professional (OSCP) certification is mandatory.
• Deep understanding of common web application vulnerabilities (OWASP Top 10) and exploitation techniques.
• Proficiency in scripting programming such as Python, Bash.
• Experience with penetration testing tools such as Metasploit, Burp Suite, Nmap, and Nessus.
• Solid understanding of networking protocols and security concepts.
• Excellent communication, interpersonal, and presentation skills.
• Ability to work independently and as part of a team.Efficient analytical and problem-solving skills.
• Must be based in Singapore and eligible to work as a contractor.

Bonus Points

• Other relevant security certifications (e.g., CEH, CISSP, GPEN).
• Contributions to the security community (e.g., bug bounty programs, open-source projects).
• Experience with threat modelling