Job Requirements
- Support the sales by attending security sales meeting (if necessary), effort estimation and provide security testing project timeline.
- Develop the security acceptance test plan.
- Provide expert technical support during the security testing activities.
- Security test preparation, setting-up of testing environment, configuration and installation of the security testing tools.
- Perform manual or automated security testing using commercial security testing tools.
- Conduct Greybox Testing (Authenticated) and/or Blackbox Testing (Unauthenticated) Penetration Tests
- Conduct Whitebox Testing and Secure Code Review
- Conduct Network and Infrastructure Vulnerability Assessment and Penetration Testing
- Conduct Web, Mobile and Desktop Application Vulnerability Assessment and Penetration Testing
- Find and pinpoint the vulnerabilities of the assess target system / application
- Document and report the vulnerabilities found in the system
- Provide professional recommendations / advice to mitigate and resolve the vulnerabilities.
- Present the security testing results to the relevant stakeholders.
- Provide weekly status reporting on the security testing activity progress
Key Requirements
- Required Certifications: Any of the followings.
- CREST Registered Penetration Tester (CREST CRT)
- Offensive Security Certified Professional (OSCP)
- Knowledge in conducting security testing with the following guidelines and standards.
- Open Web Application Security Project (OWASP Top 10 Frameworks)
- Common Vulnerability Scoring System (CVSS)
- Common Vulnerabilities and Exposures (CVE)
- Common Weakness Enumeration (CWE) / SANS Top 25 Software Errors
- High proficiency in manual and automated techniques for penetration testing (network equipment, servers, web applications, APIs, wireless, mobile, databases, and other information systems), as well as executing vulnerability assessments (injection, privilege escalation, fuzzing, buffer overflows, etc.)
- Tools – Proxies, Port Scanners, Vulnerability Scanners, Exploit Frameworks (ex: Burp, Nessus, Nmap, Metasploit)
Disclaimer: The company is committed to ensuring the privacy and security of your information. By submitting this form, you consent to the collection, processing, and retention of the information you provide. The data collected (which may include your contact details, educational background, work experience and skills) will be used solely for the purpose of evaluating your qualifications for the position you're applying for. Your data will be stored securely and retained for the duration necessary to fulfill our hiring process. If you are not selected for the position, your data will be kept on file for a limited period in case future opportunities arise. You have the right to access, correct, or delete your data at any time by contacting us at Quess Singapore | A Leading Staffing Services Provider in Singapore (quesscorp.sg)
