15 Penetration Testing jobs in Singapore

Seeking Cybersecurity Experts

We are looking for experienced penetration testing professionals to join our team. As a penetration testing consultant, you will be responsible for executing technical security assessments.

The ideal candidate should have:

• Bachelor's degree in computer science, cybersecurity, or related field

Candidates with the following skills and qualifications will be viewed favorably:

• Credited with CVEs
• Participates in bug bounty programs
• Organizes or participates in CTFs
• Delivers technical research at security conferences

To succeed in this role, you should have:

• 3+ years of experience in penetration testing or a related field
• Knowledge of penetration testing methodologies, tools and frameworks
• Experience with network (wired and wireless) and application (web, mobile, thick) security testing

We offer competitive compensation and benefits packages.

Interested candidates should apply promptly.

About the Role

As a Penetration Testing Specialist, reporting to the Internal Audit function, you will play a critical role in evaluating the organization's cybersecurity posture by simulating real-world attacks and identifying vulnerabilities across systems, applications, and networks. Your work directly supports audit objectives by validating the effectiveness of security controls, ensuring regulatory compliance, and mitigating operational risks.

Key Responsibility

• Conduct comprehensive penetration tests on applications, databases, systems and networks to identify security vulnerabilities, and prepare a detail report on the findings.
• Propose measures to ensure that identified vulnerabilities are addressed.
• Work closely with IT, risk, and compliance teams to track remediation efforts and verify closure.
• Simulate cyber attacks to evaluate defensive measures and improve security posture.

Requirements

• Minimum 5 years of hands-on penetration testing experience for web applications, mobile applications, APIs, network, databases and load testing.
• Experience conducting secure code review.
• Degree in computer science/computer engineering/information security or equivalent.
• Working knowledge of all aspects of information security is essential.
• Familiarity with systems and operational architecture of large internet companies or online business models.
• Good communication (spoken and written) skills, able to work independently and as a team.
• Certifications from either GIAC/Offensive Security/CREST required.
• Hands on experience in Kali Linux, Burp, and other advanced penetration testing, and secure code review tools.
• Good to have: Basic Mandarin skills for simple verbal and written communication with Chinese partners.

渗透测试专家

关于职位

作为一名向内部审计部门汇报的渗透测试专家,您将在评估组织的网络安全态势方面发挥关键作用,通过模拟真实攻击并识别系统、应用程序和网络中的漏洞。您的工作将通过验证安全控制措施的有效性、确保合规性并降低运营风险,直接支持审计目标。

主要职责

• 对应用程序、数据库、系统和网络进行全面的渗透测试,以识别安全漏洞,并撰写详细的调查报告。
• 提出措施,确保已识别的漏洞得到解决。
• 与IT、风险和合规团队紧密合作,跟踪修复工作并验证漏洞已关闭。
• 模拟网络攻击,评估防御措施并提升安全态势。

职位要求

• 至少5年Web应用程序、移动应用程序、API、网络、数据库和负载测试的渗透测试经。
• 具备安全代码审查经验。
• 计算机科学/计算机工程/信息安全或同等学历。
• 具备信息安全各方面的工作知识。
• 熟悉大型互联网公司或在线商业模式的系统和运营架构。
• 良好的沟通能力,能够独立工作和团队合作。
• 需持有GIAC/Offensive Security/CREST认证。
• 具有 Kali Linux、Burp 和其他高级渗透测试及安全代码审查工具的实践经验。
• 加分项:具备基础中文能力,能够进行简单的口头和书面沟通。

About the Role

As a Penetration Testing Specialist, reporting to the Internal Audit function, you will play a critical role in evaluating the organization’s cybersecurity posture by simulating real-world attacks and identifying vulnerabilities across systems, applications, and networks. Your work directly supports audit objectives by validating the effectiveness of security controls, ensuring regulatory compliance, and mitigating operational risks.

Key Responsibility

• Conduct comprehensive penetration tests on applications, databases, systems and networks to identify security vulnerabilities, and prepare a detail report on the findings.
• Propose measures to ensure that identified vulnerabilities are addressed.
• Work closely with IT, risk, and compliance teams to track remediation efforts and verify closure.
• Simulate cyber attacks to evaluate defensive measures and improve security posture.

Requirements

• Minimum 5 years of hands-on penetration testing experience for web applications, mobile applications, APIs, network, databases and load testing.
• Experience conducting secure code review.
• Degree in computer science/computer engineering/information security or equivalent.
• Working knowledge of all aspects of information security is essential.
• Familiarity with systems and operational architecture of large internet companies or online business models.
• Good communication (spoken and written) skills, able to work independently and as a team.
• Certifications from either GIAC/Offensive Security/CREST required.
• Hands on experience in Kali Linux, Burp, and other advanced penetration testing, and secure code review tools.
• Good to have: Basic Mandarin skills for simple verbal and written communication with Chinese partners.

渗透测试专家

关于职位

作为一名向内部审计部门汇报的渗透测试专家，您将在评估组织的网络安全态势方面发挥关键作用，通过模拟真实攻击并识别系统、应用程序和网络中的漏洞。您的工作将通过验证安全控制措施的有效性、确保合规性并降低运营风险，直接支持审计目标。

主要职责

• 对应用程序、数据库、系统和网络进行全面的渗透测试，以识别安全漏洞，并撰写详细的调查报告。
• 提出措施，确保已识别的漏洞得到解决。
• 与IT、风险和合规团队紧密合作，跟踪修复工作并验证漏洞已关闭。
• 模拟网络攻击，评估防御措施并提升安全态势。

职位要求

• 至少5年Web应用程序、移动应用程序、API、网络、数据库和负载测试的渗透测试经。
• 具备安全代码审查经验。
• 计算机科学/计算机工程/信息安全或同等学历。
• 具备信息安全各方面的工作知识。
• 熟悉大型互联网公司或在线商业模式的系统和运营架构。
• 良好的沟通能力，能够独立工作和团队合作。
• 需持有GIAC/Offensive Security/CREST认证。
• 具有 Kali Linux、Burp 和其他高级渗透测试及安全代码审查工具的实践经验。
• 加分项：具备基础中文能力，能够进行简单的口头和书面沟通。

Penetration Test & Vulnerability Assessment Specialist
GovTech is the lead agency driving Singapore’s Smart Nation initiatives and public sector digital transformation. As the Centre of Excellence for Infocomm Technology and Smart Systems (ICT & SS), GovTech develops the Singapore Government’s capabilities in Data Science & Artificial Intelligence, Application Development, Smart City Technology, Digital Infrastructure, and Cybersecurity.
At GovTech, we offer you a purposeful career to make lives better where we empower our people to master their craft through robust learning and development opportunities all year round.
Play a part in Singapore’s vision to build a Smart Nation and embark on your meaningful journey to build tech for public good. Join us to advance our mission and shape your future with us today!
Learn more about GovTech at tech.gov.sg.
What you will be working on
Do you want to play a critical role in securing our smart nation initiatives by uncovering weaknesses in various domains of cybersecurity programs even before the real threat actors come to play? And are you up to race against the real threat actors before organisations are compromised?
We are seeking a cybersecurity specialist in penetration testing & vulnerability assessment to join our Cyber Security Group’s Red Team. You will be part of the team that helps to protect our government’s assets from cyber-attacks. In addition, you will also have the opportunities to be involved in assessing the cybersecurity aspects of new developments in our smart nation initiatives, and demonstrate ability to quickly assimilate to knowledge in new technologies. As part of this team, you will perform penetration testing and vulnerability assessment that span across infrastructure, web application, mobile application, source code security review, etc. This role will also involve you in carrying targeted Adversary Simulations.
What you will be working on
Conduct Penetration Testing (PT), Vulnerability Assessment (VA) and Source code security review on IT assets
Support in the documentation of findings, analysis, report preparation and presentation
Develop customised tools to conduct PT and VA
Support stakeholders such as security engineers and developers in providing guidance to remediate security risks from security testing and assessments
Support stakeholders such as security engineers and developers in providing guidance in design and security controls in application, infrastructure, network, etc.
Develop Application Security related awareness programme/training/courses to uplift application security capabilities and competencies of GovTech officers
Familiar with security principles, policies and industry best practices
What we are looking for
Degree in Information Security, Computer Science/Engineering, IT, or equivalent
Passionate in cybersecurity
Good understanding of web application, system and infrastructure architecture
Good communication & presentation skills
Collaborative and team player, self-motivated, creative and versatile
Added advantage if you possess the following:
Penetration testing-specific certifications such as GPEN, CREST, OSCP is an advantage
At least 1-year hands-on experience performing PT/VA
Familiar with scripting language, for example, Perl, Python, VBscript, Javascript or Powershell, Ruby
Public disclosure of vulnerabilities or relevant awards/participations from Capture-The-Flags (CTF) competitions
Experience using tools such as Nexpose/Nessus, BurpSuite, Metasploit, etc.
Experience in security risk assessments on application, infrastructure, network, etc.
GovTech is an equal opportunity employer committed to fostering an inclusive workplace that values diverse voices and perspectives, as we believe that diversity is the foundation to innovation.
Our employee benefits are based on a total rewards approach, offering a holistic and market-competitive suite of perks. These include leave benefits to meet your work-life needs and employee wellness programmes.
We champion flexible work arrangements (subject to your job role) and trust that you will manage your own time to deliver your best, wherever you are, and whatever works best for you.
Learn more about life inside GovTech at go.gov.sg/GovTechCareers.
Stay connected with us on social media at go.gov.sg/ConnectWithGovTech.
Seniority level: Mid-Senior level
Employment type: Full-time
Job function: Quality Assurance
Industries: IT Services and IT Consulting
Note: This description preserves the original job content while presenting it in a clean, accessible format.
#J-18808-Ljbffr

Join to apply for the Security Testing Specialist role at OCBC .

Who We Are
As Singapore’s longest established bank, we have been dedicated to enabling individuals and businesses to achieve their aspirations since 1932. We provide support, services, solutions, and career paths tailored to our clients’ needs.

Today, we’re on a journey of transformation, leveraging technology and creativity to become a future-ready learning organisation. Our strategic ambition is to be Asia’s leading financial services partner for a sustainable future.

We invite you to build the bank of the future, innovate in financial services, work in supportive teams, and build lasting value in your community. Enjoy a vibrant, future-ready career with us.

Your Opportunity Starts Here.

Why Join

Protecting our customers' assets and data is central to our mission. As a Security Testing Specialist, you'll play a key role in safeguarding our systems from cyber threats, shaping the future of cybersecurity in finance.

How you succeed

Stay ahead of emerging threats, collaborate with engineering teams to identify and mitigate risks, and develop strategies to enhance cybersecurity.

What you do

• Perform application penetration testing on web-based applications, APIs
• Conduct mobile application penetration testing across platforms
• Perform network penetration testing
• Exploit vulnerabilities to assess security risks
• Document security issues and recommend mitigations
• Research latest security topics and attack vectors
• Conduct compliance testing per standards like MAS TRMG
• Perform secure code reviews when needed
• Conduct thick client penetration testing as required

• Minimum 3 years of hands-on penetration testing experience
• Experience with secure code review
• Degree in computer science, security, or related field
• Knowledge of all aspects of information security
• Familiarity with MAS TRMG and regulatory requirements
• Strong communication skills, able to work independently and in teams
• Certifications from GIAC, Offensive Security, CREST
• Hands-on experience with Kali Linux, Burp Suite, Tenable, and similar tools
• Experience conducting penetration testing for banks in Singapore preferred
• Experience with legacy systems review is a plus

Seeking a highly skilled and motivated Senior Cyber Security Testing Specialist who is skilled in application and infrastructure penetration testing, vulnerability assessment and secure code review to conduct, guide and review the work of external and cross function team security testers. In this role, you will be responsible for assessing and enhancing the security posture of the organisation’s critical applications and infrastructure through comprehensive testing, vulnerability assessment, and penetration testing techniques. Your expertise will play a crucial role in identifying security vulnerabilities and recommending risk mitigation strategies to different senior stakeholders.

Make An Impact By

• Coordinate and Oversee Penetration Testing & Vulnerability Assessment Engagements:
  • Manage and coordinate penetration testing and vulnerability assessment engagements with external vendors, ensuring effective communication and collaboration between internal stakeholders and vendors.
  • Work closely with Domain security champions to review and tailor the scope, rules of engagement, testing methodologies, and reporting for external penetration tests and vulnerability assessments.
  • Collaborate with cross-functional teams to provide guidance on Singtel's security standards, recommend best practices, and advise on effective remediation strategies.
  • Review penetration testing reports, prioritize identified vulnerabilities, and coordinate efforts to address them in a timely manner.
  • Track and report on the progress and outcomes of penetration testing and vulnerability assessments, ensuring that all findings are addressed appropriately.
• Maintenance of tools and Conduct Various Penetration Tests:
  • Perform different types of penetration testing (e.g., AI models, application, API, Infrastructure, etc.) following recognized methodologies, including OWASP and Singtel’s internal standards, utilizing both manual and automated testing methods, as needed.
  • Maintain and configure the tests required of automated testing tools to support black box and white box testing, and ensure alignment with latest industry test requirements e.g. OWASP, covering all forms of technologies e.g. Cloud Apps, On-prem Apps, COTS products, In-house developed Apps, AI models, APIs, OS, DB, VM, Network devices, etc.
  • Identify gaps in automated testing tools and propose new tooling required to augment testing program as needed.
• Bug Bounty Program Management:
  • Oversee and manage the bug bounty program and associated platforms for identifying and addressing reported vulnerabilities.
  • Validate/ triage the reported vulnerabilities, assess their impact on Singtel’s systems, and collaborate with relevant stakeholders to prioritize and remediate the issues.
  • Track and report on findings and outcomes from the bug bounty program to ensure timely resolution.
  • Develop engaging programs to boost the visibility and popularity of Singtel's bug bounty program.
• Manage and conduct secure code reviews using scanning tools and techniques to identify security weaknesses in software code.
• Analyze the results from code scans and work closely with development teams to implement necessary security fixes.
• Assist in the creation and implementation of secure coding practices across the organization.
• Vulnerability Retesting and Documentation:
  • Retest security vulnerabilities arising from various sources e.g. Bug Bounty, Penetration testing, etc. after remediation and update reports with the latest results and outcomes.
  • Develop and maintain comprehensive documentation for all vulnerability assessments, secured code reviews and penetration tests, including detailed findings, methodologies, and recommendations for improvements etc.
• Stay Current with Security Trends and Threats:
  • Continuously monitor the latest security trends, emerging vulnerabilities, and attack techniques to ensure that security testing methodologies and tools remain up-to-date and effective.

Skills for Success:

• Bachelor's degree in Computer Science, Information Security, or a related field.
• Attained OSCP or CREST.
• At least 5 years of experience working in Cyber and Information security field.
• Solid experience in application security testing, vulnerability assessment, secure code review and penetration testing.
• Proficiency in performing AI models, API and application security testing using manual techniques, as well as utilizing runtime vulnerability testing tools and/or code review tools.
• Strong understanding of OWASP Top 10, CWE/SANS Top 25, and other common vulnerability frameworks.
• Out of which, at least 3 years experience in delivering various AI model, API, application, infrastructure penetration testing, vulnerability assessment and secure code review.
• Proficiency in performing AI model, API and application security assessment using manual techniques.
• Proficient in using and managing various security tools and products like Fortify, AppScan, Webinspect, Burp Suite, Nessus, Guardrails AI, Giskard, Moonshot, Deepcheck, Evidently, Pyrit, Adversarial Robustness Toolbox (ART), PyRIT, etc.

Rewards that Go Beyond

• Full suite of health and wellness benefits.
• Ongoing training and development programs.
• Internal mobility opportunities.

Are you ready to say hello to BIG Possibilities?

Take the leap with Singtel to unlock new opportunities and accelerate your growth. Apply now and start your empowering career!

Direct message the job poster from Ensign InfoSecurity

About the Role:

We are seeking a Senior / Cybersecurity Engineer with experience in IoT security testing to support our Cybersecurity Labelling Scheme (CLS) assessments. The candidate will work on penetration testing, and compliance assessments to ensure IoT products meet stringent cybersecurity requirements.

Key Responsibilities:

• Conduct security evaluations for IoT devices in accordance with CSA Cybersecurity Labelling Scheme (CLS) requirements.
• Perform penetration testing, vulnerability assessments, etc. on IoT devices.
• Ensure compliance with ISO/IEC 17025, CLS (IoT) and other relevant cybersecurity frameworks.
• Prepare technical documentation, compliance reports, and security advisories for IoT manufacturers and clients.
• Research emerging IoT security threats and propose innovative mitigation strategies.
• Collaborate with government agencies, regulatory bodies, and certification authorities to establish cybersecurity testing methodologies.
• Bachelor's degree in Cybersecurity, Computer Engineering, or a related field.
• Minimum 2+ years of experience in cybersecurity testing, penetration testing, or vulnerability analysis for embedded / IoT devices.
• Understanding of CLS requirements.
• Hands-on experience on one or more of the following but not limited to:
• Debug interfaces such as JTag, UART, etc.
• Security testing tools (e.g., Kali Linux, Metasploit, Burp Suite, OWASP ZAP, Ghidra, etc.)
• Software Binary Analysis
• Mobile Apps Security (Android, iOS)
• Simple Power Analysis and Fault Injection Attack
• Strong analytical skills and ability to assess IoT device vulnerabilities and attack surfaces.
• Certification such as CISSP, CEH, OSCP, GSEC, or equivalent cybersecurity credential is a bonus.

• Seniority level Mid-Senior level

• Employment type Full-time

• Job function Information Technology
• Industries Computer and Network Security

Referrals increase your chances of interviewing at Ensign InfoSecurity by 2x

Get notified about new Cyber Security Engineer jobs in Kallang, Central Singapore Community Development Council, Singapore .

We’re unlocking community knowledge in a new way. Experts add insights directly into each article, started with the help of AI.

Cybersecurity Engineer (IoT Device Security Testing)
Cybersecurity Engineer (IoT Device Security Testing)
Direct message the job poster from Ensign InfoSecurity
Join Us - Ensign InfoSecurity! | Conquer the Unknown | IHRP-CP
About the Role:
We are seeking a Senior / Cybersecurity Engineer with experience in IoT security testing to support our Cybersecurity Labelling Scheme (CLS) assessments. The candidate will work on penetration testing, and compliance assessments to ensure IoT products meet stringent cybersecurity requirements.
Key Responsibilities:
Conduct security evaluations for IoT devices in accordance with CSA Cybersecurity Labelling Scheme (CLS) requirements.
Perform penetration testing, vulnerability assessments, etc. on IoT devices.
Ensure compliance with ISO/IEC 17025, CLS (IoT) and other relevant cybersecurity frameworks.
Prepare technical documentation, compliance reports, and security advisories for IoT manufacturers and clients.
Research emerging IoT security threats and propose innovative mitigation strategies.
Collaborate with government agencies, regulatory bodies, and certification authorities to establish cybersecurity testing methodologies.
Bachelor's degree in Cybersecurity, Computer Engineering, or a related field.
Minimum 2+ years of experience in cybersecurity testing, penetration testing, or vulnerability analysis for embedded / IoT devices.
Understanding of CLS requirements.
Hands-on experience on one or more of the following but not limited to:
Debug interfaces such as JTag, UART, etc.
Security testing tools (e.g., Kali Linux, Metasploit, Burp Suite, OWASP ZAP, Ghidra, etc.)
Software Binary Analysis
Mobile Apps Security (Android, iOS)
Simple Power Analysis and Fault Injection Attack
Strong analytical skills and ability to assess IoT device vulnerabilities and attack surfaces.
Certification such as CISSP, CEH, OSCP, GSEC, or equivalent cybersecurity credential is a bonus.
Seniority level
Seniority level Mid-Senior level
Employment type
Employment type Full-time
Job function
Job function Information Technology
Industries Computer and Network Security
Referrals increase your chances of interviewing at Ensign InfoSecurity by 2x
Get notified about new Cyber Security Engineer jobs in
Kallang, Central Singapore Community Development Council, Singapore .
Information Technology - Cyber Security Analyst (Scoot)
Graduate Hiring - Cybersecurity Engineer
Information Technology - Cyber Security Engineer (Threat Management and Incident Response) (Scoot)
Information Technology - Cyber Security Lead Engineer
Security Engineer (SOC Analyst) - Digital Bank
Senior Cybersecurity Engineer (Endpoint Protection, Detection and Response)
Information Technology - Cyber Security Specialist (Risk and Governance)
Offensive Security Engineer (Red Team) - Information Security
Cybersecurity Engineer (Operational Technology)
Data Center Security Specialist, Data Center Security
Cybersecurity Engineer - Asian Timezones
Principal/ Senior Cybersecurity Engineer
We’re unlocking community knowledge in a new way. Experts add insights directly into each article, started with the help of AI.
#J-18808-Ljbffr