VAPT Engineer

PCSS; Singapore; On-site; SGD 70,000 - 110,000; Full time

Job summary

PCSS is seeking an IT security professional experienced in pen testing, vulnerability assessments, and source code review across Web, Mobile, API and network domains. The role emphasizes strong reporting, communication, and collaboration skills to support client scoping and risk mitigation.

You will apply automated tools (Nessus, Burp Suite Pro, Fortify, Checkmarx) and manual testing to deliver detailed security assessments and actionable recommendations.

Qualifications

• Bachelor-level degree or equivalent in Computer Engineering, Computer Science, Information Systems, Digital Forensics or similar.
• Minimum 2 years of IT security implementation and operations experience.
• Experience with penetration testing and vulnerability assessment across Web, Mobile, API, and Network/Infrastructure domains; plus source code review.
• Good interpersonal, presentation and writing skills.

Responsibilities

• Perform penetration tests (Web, Mobile, API, Network/Infrastructure) using manual and automated tools.
• Conduct source code reviews with automated and manual methods.
• Write and present comprehensive security assessment reports and guidance on mitigations.
• Assist clients in project scoping and effort estimation, identifying attack surfaces.
• Contribute to improving security service methodologies and assets.

Skills

Interpersonal skills

Presentation skills

Writing skills

Team player

Penetration testing

Vulnerability assessment

HTTP protocol knowledge

Cryptography principles

Education

Computer Engineering/CS/IS/Digital Forensics degree

Tools

Nessus

Burp Suite Professional

HP Fortify

Checkmarx

Job description

• Degree in Computer Engineering, Computer Science, Information Systems, Digital Forensics or equivalent qualifications.
• Minimum 2 years of relevant work experience in IT security implementation and operations.
• Strong background in executing comprehensive penetration tests and vulnerability assessments across domains (Web, Mobile, API, Network/Infrastructure), as well as source code reviews.
• Good interpersonal skills and a team player.
• Strong presentation and writing skills.

Job Description:

• Perform penetration tests (Web, Mobile, API, Network/Infrastructure). Assessments involve manual testing and analysis as well as the use of automated application vulnerability scanning/testing and/or code review tools. i.e. Nessus, Burp Suite Professional, HP Fortify
• Perform source code review for applications using both automated tools (i.e. HP Fortify, Checkmarx) and manual testing.
• Write and present comprehensive security assessment report/findings and support customer in assessing mitigations and remediation options.
• Provide support for potential clients in project scoping and effort estimation, including identifying attack surfaces within network and application architecture.
• Work on improvements for provided security services, including the continuous enhancement of existing methodology material and supporting assets.

Technical Skill sets:

• Possessed OSCP or attained CREST CRT.
• Several years of experience developing web and/or mobile applications, i.e. financial, e-commerce, or internet-facing business applications.
• Knowledge of the HTTP protocol and how it works
• Understanding of cryptography principles