Penetration Tester (VAPT, CREST CRT)
Summary
On-site penetration tester in Singapore plans and runs security tests on web, mobile, and infrastructure to find vulnerabilities, writes reports, and works with teams to fix issues.
Role Description
This is a full-time, on-site Penetration Tester (CREST CRT) role based in Singapore. The Penetration Tester will plan and execute penetration tests on web, mobile, and infrastructure environments to identify vulnerabilities and validate security controls. Day-to-day work includes scoping engagements, performing manual and automated testing, documenting technical findings, and producing clear, actionable reports for technical and non-technical stakeholders. The role involves collaborating with security engineers, developers, and business teams to recommend remediation steps and support retesting activities. The Penetration Tester will also contribute to red team exercises, stay current with emerging threats and attack techniques, and help improve internal testing methodologies, tools, and processes.
Qualifications
- CREST Registered Tester (CRT) certification is A MUST (valid and not expired)
- Additional certifications (e.g., OSCP, OSCE, GXPN, CISSP) are a plus.
- Singapore-based candidates who are able to support local operations and face-to-face meetings will be an advantage.
Interested applicants please send your resume to venessagoh@recruitexpress.com.sg
Venessa Goh Wee Ni
R24124686
Recruit Express Pte Ltd
EA License No: 99C4599
We regret that only shortlisted candidates will be contacted.