Senior Penetration Tester - Web, API & Cloud Security

SCIENTE; Singapore; On-site; SGD 90,000 - 140,000; Full time

Job summary

SCIENTE seeks a Penetration Tester to identify, analyze and exploit security vulnerabilities across networks, applications and cloud environments. You will deliver actionable insights and risk assessments to strengthen security posture.

The role requires 3+ years of hands-on testing, strong knowledge of OWASP Top 10, and experience with tools like Burp Suite, Nmap, Metasploit and Kali Linux. Reporting and collaboration with security teams are essential.

Qualifications

• 3+ years of hands-on penetration testing experience.
• Strong knowledge of OWASP Top 10 and common web vulnerabilities.
• Experience in testing across networks, applications and cloud environments; report writing and risk assessment.

Responsibilities

• Conduct penetration testing across web applications, APIs, networks, infrastructure and cloud environments.
• Perform vulnerability assessment and validate vulnerabilities through controlled exploitation.
• Identify security weaknesses including OWASP Top 10, authentication/authorization flaws, injection vulnerabilities, misconfigurations and privilege escalation.
• Conduct internal/external network penetration testing and assess network security controls.
• Perform Active Directory security assessments, including privilege escalation, credential attacks and lateral movement.
• Conduct security testing of REST APIs, mobile applications and cloud environments where applicable.
• Develop or customise scripts, payloads and tools to support penetration-testing activities.
• Analyse test results and determine the business impact and risk of identified vulnerabilities.
• Prepare detailed penetration-testing reports including technical findings, evidence, risk ratings and remediation recommendations.
• Work with security and technology teams to validate remediation and perform re-testing.
• Keep up to date with emerging vulnerabilities, exploitation techniques, attack methodologies and security trends.

Skills

Penetration testing

Web application testing

API testing

Network security

OWASP Top 10

Linux/Windows

Active Directory security

Privilege escalation

Scripting (Python/PowerShell/Bash)

Reporting

Analytical thinking

Education

Diploma/Degree in Cybersecurity, Computer Science, Information Technology

Tools

Burp Suite

Nmap

Metasploit

Kali Linux

Wireshark

BloodHound

Impacket

Nessus

Job description

SCIENTE seeks a Penetration Tester to identify, analyze and exploit security vulnerabilities across networks, applications and cloud environments. You will deliver actionable insights and risk assessments to strengthen security posture.

The role requires 3+ years of hands-on testing, strong knowledge of OWASP Top 10, and experience with tools like Burp Suite, Nmap, Metasploit and Kali Linux. Reporting and collaboration with security teams are essential.