About the Role


We are seeking a driven and technically proficient Penetration Tester The ideal candidate will have solid experience in performing end-to-end Vulnerability Assessments and Penetration Testing (VAPT) across various environments, possess strong reporting and scripting skills, and demonstrate the ability to engage with clients during both pre-sales and project delivery phases. This is an excellent opportunity for someone looking to grow their career within a CREST-accredited organization that delivers high-impact services to critical industries.


Key Responsibilities


 Penetration Testing & Security Assessments

• Plan, execute, and document penetration tests on web applications, mobile apps, APIs, infrastructure, cloud environments, and internal/external networks. (Black, Grey, White pentest)


• Perform source code reviews to uncover insecure code practices and logical vulnerabilities.


• Develop custom POC scripts and exploits in Python, PHP, JavaScript, and HTML.


• Utilize industry-standard tools including Burp Suite, Nessus, Checkmarx, HCL AppScan, WebInspect, and manual testing techniques.


• Conduct compliance-aligned security assessments based on OWASP, NIST, CREST, and MITRE ATT&CK frameworks.

• Prepare detailed technical and executive reports, risk analysis, and remediation recommendations.


• Draft and maintain standardized test plans, methodologies, and reporting templates.


• Perform peer reviews of reports and assessments for accuracy, clarity, and technical depth.

• Support pre-sales activities including technical scoping, requirement gathering, and proposal development.


• Participate in client-facing meetings to explain findings, provide mitigation advice, and manage expectations.


• Maintain strong client relationships to ensure satisfaction and encourage repeat business.

• Mentor and guide junior testers or interns; foster knowledge sharing and continuous improvement.


• Collaborate with internal teams to improve internal tools, testing methodologies, and knowledge bases.


• Stay updated on latest threats, vulnerabilities, and tools in the cybersecurity space.

• Singapore Citizen or Permanent Resident (due to client/project security requirements)


• Minimum 4 years of penetration testing experience


• CREST CRT and CPSA certified (preferred)


• Other Security certifications: OSCP, OSWP, HTB, CBBH, CISSP (Bonus)


• Red Team experience (Bonus)


• Strong knowledge of OWASP Top 10, MITRE ATT&CK, CVSS, and secure coding practices


• Strong scripting and automation skills using Python, PowerShell, or Bash


• Experience with both automated tools and manual testing techniques


• Strong written and verbal communication skills, especially for reporting and client presentations


• Ability to manage multiple projects and deadlines in a fast-paced consulting environment

• Experience with cloud security testing (AWS, Azure, GCP)


• Knowledge of DevSecOps or CI/CD integration with security tools


• Familiarity with red teaming, adversary emulation, or purple teaming


• Involvement in bug bounty programs or CTFs