Senior Penetration Tester: Web & App Security Expert

digital treasures center pte. ltd.; Singapore; On-site; SGD 90,000 - 130,000; Full time

Job summary

digital treasures center pte. ltd.

in Singapore is seeking an experienced penetration tester to conduct comprehensive assessments of web systems, applications and internal networks, identify security vulnerabilities, and provide actionable remediation guidance to clients. You will own the full penetration testing lifecycle—from information gathering to vulnerability verification, including Java code audits, mobile security testing, and reporting.

Qualifications

• Bachelor's degree or above in Computer Science, Computer Engineering, or a related field.
• 5+ years of experience in penetration testing / information security, with experience on both the client side and security vendor (consulting) side preferred.
• Strong ability to work independently, capable of taking on a project lead role and independently liaising with clients and project teams.

Responsibilities

• Conduct comprehensive penetration testing of web systems, applications, and internal networks, identifying and verifying security vulnerabilities.
• Independently execute the full penetration testing lifecycle: information gathering, vulnerability scanning, vulnerability verification, privilege escalation, lateral movement within internal networks, etc.
• Perform in-depth analysis of OWASP Top 10 vulnerabilities and provide remediation recommendations.
• Conduct code audits covering Java frameworks (Spring, Spring Boot, Spring MVC, MyBatis) and identify common web vulnerabilities at source level.
• Perform mobile application security testing, including decompilation, hardening detection, static/dynamic analysis, and API penetration testing.
• Independently prepare penetration testing reports and communicate technical findings with project teams and clients.
• Participate in red team/blue team exercises and cyber defense drills, handling monitoring, analysis, attribution, and remediation.
• Maintain familiarity with security frameworks such as MAS TRM, DORA, PCI DSS, ISO 27001, and SOC 2.
• Assist in delivering enterprise information security training to enhance internal security awareness.

Skills

Penetration testing

Security tooling

Python scripting

Java code audits

Mobile security testing

Report writing

Client liaison

Education

Bachelor's degree in CS/CE or related

Tools

AWVS

Nmap

SQLMap

Burp Suite

AppScan

Fortify

Eclipse

Frida

JADX

apktool

Job description

digital treasures center pte. ltd.

in Singapore is seeking an experienced penetration tester to conduct comprehensive assessments of web systems, applications and internal networks, identify security vulnerabilities, and provide actionable remediation guidance to clients. You will own the full penetration testing lifecycle—from information gathering to vulnerability verification, including Java code audits, mobile security testing, and reporting.