Senior Penetration Tester - Whitebox & AppSec Expert

Citi; Singapore; Presencial; SGD 120.000 - 200.000; Jornada completa

Descripción de la vacante

Citi is seeking a Senior Penetration Tester in Singapore to join our Offensive Security & Vulnerability Management team. You will conduct in-depth vulnerability research, exploit development, and rigorous whitebox testing using source code, configuration data, and internal knowledge to identify complex risks.

You will perform manual and automated source code reviews across Java, C#, Python, and JavaScript, analyze third‑party components, and provide clear remediation guidance, reporting, and

Formación

• 6+ years of experience in penetration testing, with emphasis on whitebox testing and source code review.
• Proven ability to identify novel vulnerabilities and develop exploits.
• Strong programming skills in Java, C#, or Python, and knowledge of OWASP Top 10.
• Experience with SAST/DAST tools and secure coding practices.

Responsabilidades

• Perform in-depth vulnerability research to identify zero‑day and known vulnerabilities in enterprise apps.
• Create comprehensive whitebox testing using source code and internal docs to uncover security flaws.
• Review source code across Java, C#, Python, and JavaScript to identify vulnerabilities.
• Assess third‑party libraries and open-source components for CVEs and risk.
• Provide remediation guidance with actionable fixes to development teams.
• Develop and evolve security testing tooling and automation to improve coverage.
• Prepare detailed security reports with risk levels and mitigations.
• Stay current with threats, vulnerabilities, and industry best practices.

Conocimientos

Penetration testing

Whitebox testing

Source code review

Programming (Java/C#/Python)

Security communications

Team collaboration

Educación

Bachelor’s or Master’s degree in Computer Science / Information Security

OSCE / GIAC GWAPT / GPEN / GXPN certifications

Herramientas

SAST tools

DAST tools

Descripción del empleo

Citi is seeking a Senior Penetration Tester in Singapore to join our Offensive Security & Vulnerability Management team. You will conduct in-depth vulnerability research, exploit development, and rigorous whitebox testing using source code, configuration data, and internal knowledge to identify complex risks.

You will perform manual and automated source code reviews across Java, C#, Python, and JavaScript, analyze third‑party components, and provide clear remediation guidance, reporting, and