Senior - Penetration Tester

Morgan McKinley; Singapore; On-site; SGD 70,000 - 120,000; Full time

Job summary

Morgan McKinley is seeking a penetration tester to conduct testing across systems, networks and applications, identifying vulnerabilities and providing actionable remediation guidance. The role emphasizes strong offensive security knowledge and the ability to communicate complex risks to diverse stakeholders.

The candidate will develop test plans, generate comprehensive reports, and collaborate with cross-functional teams to strengthen the organisation's security controls.

Qualifications

• 3–12 years of experience in penetration testing or cybersecurity roles.
• Proficiency with penetration testing tools including Metasploit, Burp Suite, Nmap and Wireshark.
• Strong understanding of networking, web apps, and security best practices.
• Experience with vulnerability assessment tools and techniques.
• Knowledge of PCI-DSS, ISO 27001 and NIST frameworks.
• Ability to communicate technical findings to diverse stakeholders.
• Certifications such as OSCP, CEH or GPEN are desirable.

Responsibilities

• Conduct penetration testing on systems, applications and networks to identify vulnerabilities.
• Develop and execute comprehensive test plans and strategies for penetration testing.
• Provide detailed reports with findings, risk assessments and remediation recommendations.
• Collaborate with cross-functional teams to enhance security posture.
• Stay updated on security trends, vulnerabilities and tooling.

Skills

Offensive security

Attacker methodologies

Stakeholder communication

Security best practices

Education

OSCP/CEH/GPEN certifications

Tools

Metasploit

Burp Suite

Nmap

Wireshark

Job description

Description

This role involves conducting penetration testing, vulnerability assessments and security research to identify potential attack vectors, evaluate security controls and provide actionable recommendations to strengthen the organisation's cybersecurity posture.

The ideal candidate will possess strong technical expertise in offensive security, a good understanding of attacker methodologies and the ability to communicate security risks effectively to both technical and non-technical stakeholders.

Responsibilities

• Conduct penetration testing on various systems, applications, and networks to identify vulnerabilities and weaknesses.
• Develop and execute comprehensive test plans and strategies for penetration testing.
• Provide detailed reports on findings, including risk assessments and remediation recommendations.
• Collaborate with cross-functional teams to enhance the security posture of the organization.
• Stay updated on the latest security trends, vulnerabilities, and tools in the industry.

Skills and Qualifications

• 3-12 years of experience in penetration testing or cybersecurity roles.
• Proficiency in penetration testing tools such as Metasploit, Burp Suite, Nmap, and Wireshark.
• Strong understanding of networking protocols, web applications, and security best practices.
• Experience with vulnerability assessment tools and techniques.
• Knowledge of compliance frameworks such as PCI-DSS, ISO 27001, and NIST.
• Ability to effectively communicate technical findings to both technical and non-technical stakeholders.
• Relevant certifications such as OSCP, CEH, or GPEN are highly desirable.

Pam Lim

Morgan Mckinley Pte Ltd

EA Licence No: 11C5502 | EAP Registration No: R1106192