Senior Penetration Tester: Web/API & Cloud Security

Sciente International Pte Ltd; Singapore; On-site; SGD 90,000 - 140,000; Full time

Job summary

Sciente International Pte Ltd is seeking a Penetration Tester to identify, analyze, and exploit security vulnerabilities across networks, applications, and cloud environments using ethical hacking techniques. You will deliver actionable insights and risk assessments to strengthen our security posture.

The role requires hands-on testing experience, a solid grasp of OWASP Top 10, and proficiency with industry tools.

Qualifications

• 3+ years hands-on penetration testing experience.
• Strong web app and API testing experience.
• Solid understanding of network protocols (TCP/IP, HTTP/HTTPS, DNS).
• Knowledge of OWASP Top 10 and common vulnerabilities.
• Experience with Linux and Windows environments.
• Knowledge of Active Directory and privilege escalation.
• Scripting skills in Python, PowerShell or Bash.
• Experience with penetration testing tools such as Burp Suite, Nmap, Metasploit, Kali Linux, Wireshark, BloodHound, Impacket and Nessus.
• Strong analytical and report-writing skills.

Responsibilities

• Conduct penetration testing across web apps, APIs, networks, infrastructure and cloud environments.
• Perform vulnerability assessments and validate findings through controlled exploitation.
• Identify security weaknesses including OWASP Top 10, authentication/authorization flaws, injections and misconfigurations.
• Carry out internal/external network penetration testing and assess network controls.
• Perform Active Directory security assessments, including privilege escalation and lateral movement.
• Test REST APIs, mobile apps and cloud environments where applicable.
• Develop or customize scripts and tools to support testing.
• Analyze results and determine business impact and risk of vulnerabilities.
• Prepare detailed penetration-testing reports with evidence, risk ratings, and remediation recommendations.
• Collaborate with security teams to validate remediation and re-test.
• Keep up to date with vulnerabilities and attack techniques.

Skills

Penetration testing

Web app & API testing

Network security fundamentals

OWASP Top 10

Linux/Windows proficiency

Active Directory security

Python/PowerShell/Bash

Risk reporting & analysis

Security tooling familiarity

Education

Diploma/Degree in Cybersecurity/CS/IT

Tools

Burp Suite

Nmap

Metasploit

Kali Linux

Wireshark

BloodHound

Impacket

Nessus

Job description

Sciente International Pte Ltd is seeking a Penetration Tester to identify, analyze, and exploit security vulnerabilities across networks, applications, and cloud environments using ethical hacking techniques. You will deliver actionable insights and risk assessments to strengthen our security posture.

The role requires hands-on testing experience, a solid grasp of OWASP Top 10, and proficiency with industry tools.