Penetration Tester

Vouch is currently working with a Singapore-based company that specializes in security solutions.

We are seeking an experienced Penetration Tester with strong expertise in source code review. The ideal candidate will not only possess hands-on experience in various domains such as web, network, mobile, thick-client, IoT, and cloud security but also demonstrate the ability to lead, mentor, and teach other team members. This role requires a deep understanding of security vulnerabilities, penetration testing methodologies, and the ability to perform thorough source code reviews to identify potential security flaws.

Primary Responsibilities

• Perform detailed source code reviews to identify security vulnerabilities.
• Act as the domain expert in source code analysis.
• Perform hands-on penetration testing across multiple domains: web applications, networks, mobile applications, thick-client environments, IoT devices, and cloud platforms.
• Identify, exploit, and document security vulnerabilities.
• Create comprehensive reports that detail findings and recommended mitigations.
• Collaborate with team members to share knowledge and improve security testing methods.
• Conduct security assessments and audits of systems, applications, and networks.
• Keep updated on the latest security trends, vulnerabilities, and technologies to ensure a strong organizational security posture.

What I Am Looking For

• At least 1-2 years of hands-on experience in penetration testing across various domains.
• Proven experience in performing and leading detailed source code reviews, with a strong understanding of secure coding practices.
• Desirable certifications like CREST, OSCP, or similar recognized penetration testing qualifications.
• In-depth knowledge of common security vulnerabilities
• Strong report writing and documentation skills, with the ability to explain technical issues to non-technical stakeholders.

EA License: 22C1396

EA Personnel: R1551466