Senior Penetration Tester & Security Researcher

Aleph (Formerly Red Alpha Cyber); Singapore; Hybrid; SGD 90,000 - 150,000; Full time

Job summary

Aleph (Formerly Red Alpha Cyber) seeks a Penetration Tester to perform real security research across web, infrastructure, cloud, AI, and mobile environments in Singapore. You will explore systems deeply, not just run tools, and contribute to live client engagements.

You will report to the Team Lead, work with a small team of researchers in an international setting, and have opportunities to build internal tools and advance your security research capabilities.

Qualifications

• 3+ years of hands-on penetration testing and/or security research.
• OSCP or CREST CRT certification mandatory.
• Based in Singapore with valid work authorization.
• Experience across web, infrastructure, cloud, AI, and mobile environments.
• Ability to work independently and report findings clearly to clients.
• Hands-on with AI-assisted security testing and new AI-driven workflows.
• Excellent written and verbal English communication skills.
• Availability to work in a hybrid model in Singapore.

Responsibilities

• Conduct penetration testing and security research across web applications, infrastructure and networks, cloud and Kubernetes environments, AI systems, mobile applications, and source code
• Take ownership of security reporting. Final output must be technically accurate with root-cause analysis and real-world business impact
• Present vulnerabilities, findings, and recommendations clearly to clients and their technical teams
• Build internal security tools, methodologies, automation, and agentic workflows to enable faster, deeper work
• Contribute to red team and adversary emulation engagements
• Independently investigate unfamiliar technologies, attack surfaces, and complex technical problems

Skills

Penetration testing

Security research

AI tooling for security

Independent investigation

Job description

Aleph (Formerly Red Alpha Cyber) seeks a Penetration Tester to perform real security research across web, infrastructure, cloud, AI, and mobile environments in Singapore. You will explore systems deeply, not just run tools, and contribute to live client engagements.

You will report to the Team Lead, work with a small team of researchers in an international setting, and have opportunities to build internal tools and advance your security research capabilities.