Penetration Tester (VAPT, CREST CRT)

Role Description

This is a full-time, on-site Penetration Tester (CREST CRT) role based in Singapore. The Penetration Tester will plan and execute penetration tests on web, mobile, and infrastructure environments to identify vulnerabilities and validate security controls. Day-to-day work includes scoping engagements, performing manual and automated testing, documenting technical findings, and producing clear, actionable reports for technical and non-technical stakeholders. The role involves collaborating with security engineers, developers, and business teams to recommend remediation steps and support retesting activities. The Penetration Tester will also contribute to red team exercises, stay current with emerging threats and attack techniques, and help improve internal testing methodologies, tools, and processes.

Qualifications

• CREST Registered Tester (CRT) certification is A MUST (valid and not expired)
• Additional certifications (e.g., OSCP, OSCE, GXPN, CISSP) are a plus.
• Singapore-based candidates who are able to support local operations and face-to-face meetings will be an advantage.

We regret that only shortlisted candidates will be contacted.