Vulnerability Assessment and Penetration Testing Engineer

Dicetek LLC; Singapore; On-site; SGD 150,000 - 200,000; Full time

Job summary

A leading cybersecurity firm in Singapore seeks a Reporting VP, Cybersecurity Assessment Lead-Manager. In this role, you will conduct security assessments and penetration testing for web, mobile, and API applications. Your responsibilities include reporting security findings, collaborating with development teams, and recommending security enhancements. Preferred qualifications include OSCP certification and experience in cloud security and DevSecOps practices. This position emphasizes a culture of security awareness and continuous improvement.

Qualifications

• Experience with security assessments and penetration testing.
• Knowledge of cloud security and DevSecOps practices.
• Certification in OSCP is preferred.

Responsibilities

• Conduct security assessments on web, mobile, and API applications.
• Document and report security findings clearly.
• Work with development teams to integrate security into the SDLC.

Skills

OWASP vulnerabilities

Static and Dynamic Code Analysis

Security Testing

Collaboration with development teams

Penetration Testing

Job description

As the Reporting VP, Cybersecurity Assessment Lead-Manager, you will be responsible for various key responsibilities related to security testing, reporting, technical walkthroughs, recommendations, and collaboration. Your role will involve conducting security assessments and penetration testing on web, mobile, and API applications. You will need to identify and exploit vulnerabilities to assess their impact and risk, as well as perform static and dynamic code analysis to uncover security flaws. Utilizing your knowledge of OWASP vulnerabilities and other common security issues, you will guide testing efforts and conduct Static Application Security Testing (SAST), Software Composition Analysis (SCA), and image scanning to identify vulnerabilities in code, dependencies, and container images.In terms of reporting, you will be expected to document and report security findings in a clear and concise manner. You will provide detailed technical reports and executive summaries for various stakeholders, track and manage vulnerabilities through their lifecycle, and ensure timely remediation. Additionally, you will conduct technical walkthroughs of security findings with development and engineering teams, explaining vulnerabilities, their impact, potential exploitation scenarios, and providing guidance on remediation strategies and best practices.Your role will also involve developing and recommending security controls and countermeasures to mitigate identified risks. It is essential to stay updated with the latest security trends, vulnerabilities, and attack vectors, and propose enhancements to existing security policies and procedures. Collaboration will be a key aspect of your responsibilities as you work closely with development teams to integrate security into the software development lifecycle (SDLC) and foster a culture of security awareness and continuous improvement within the organization.Preferred skills for this role include certifications such as OSCP, experience with cloud security and DevSecOps practices, and knowledge of secure coding practices and code review techniques.,