VAPT Engineer: Penetration Testing & Security Assessments

PCSS; Singapore; On-site; SGD 70,000 - 110,000; Full time

Job summary

PCSS is seeking an IT security professional experienced in pen testing, vulnerability assessments, and source code review across Web, Mobile, API and network domains. The role emphasizes strong reporting, communication, and collaboration skills to support client scoping and risk mitigation.

You will apply automated tools (Nessus, Burp Suite Pro, Fortify, Checkmarx) and manual testing to deliver detailed security assessments and actionable recommendations.

Qualifications

• Bachelor-level degree or equivalent in Computer Engineering, Computer Science, Information Systems, Digital Forensics or similar.
• Minimum 2 years of IT security implementation and operations experience.
• Experience with penetration testing and vulnerability assessment across Web, Mobile, API, and Network/Infrastructure domains; plus source code review.
• Good interpersonal, presentation and writing skills.

Responsibilities

• Perform penetration tests (Web, Mobile, API, Network/Infrastructure) using manual and automated tools.
• Conduct source code reviews with automated and manual methods.
• Write and present comprehensive security assessment reports and guidance on mitigations.
• Assist clients in project scoping and effort estimation, identifying attack surfaces.
• Contribute to improving security service methodologies and assets.

Skills

Interpersonal skills

Presentation skills

Writing skills

Team player

Penetration testing

Vulnerability assessment

HTTP protocol knowledge

Cryptography principles

Education

Computer Engineering/CS/IS/Digital Forensics degree

Tools

Nessus

Burp Suite Professional

HP Fortify

Checkmarx

Job description

PCSS is seeking an IT security professional experienced in pen testing, vulnerability assessments, and source code review across Web, Mobile, API and network domains. The role emphasizes strong reporting, communication, and collaboration skills to support client scoping and risk mitigation.

You will apply automated tools (Nessus, Burp Suite Pro, Fortify, Checkmarx) and manual testing to deliver detailed security assessments and actionable recommendations.