- Pengalaman
- 2+ tahun
- Gaji
- —
- Lowongan
- 1
- Diposting
- 5 jam yang lalu
- Mode kerja
- Di kantor
- Pendidikan
- Bachelor’s degree in Computer Science, Cybersecurity, or related discipline
- Kelayakan
- Candidates with a background in Computer Science, Cybersecurity, or a related discipline and at least 2 years of experience in penetration testing or vulnerability assessment can apply.
- Melanjutkan
- Wajib mendaftar
Tempat Anda akan bekerja
Deskripsi pekerjaan
Role overview
We are looking for a Penetration Tester who can assess the security strength of applications, networks, and cloud setups. The role involves simulating attacks, finding security gaps, and turning findings into practical fixes that improve overall protection.
Key responsibilities
- Carry out penetration testing across applications, networks, cloud platforms, and OT/ICS environments.
- Run vulnerability assessments and analyze exploits to expose weak points.
- Check and confirm risks in line with standards and guidance such as OWASP Top 10, SANS CWE Top 25, and NIST.
- Use tools and frameworks including Metasploit, Burp Suite, Nmap, Wireshark, and similar utilities.
- Work with cross-functional teams to support secure architecture and implementation.
- Prepare detailed reports explaining vulnerabilities, attack techniques, and recommended remediation steps.
- Monitor remediation efforts and assist engineering teams with root-cause investigation.
- Maintain records of methods, standards, and testing frameworks to support consistency and compliance.
Requirements
- Bachelor’s degree in Computer Science, Cybersecurity, or a related field.
- Minimum 2 years of hands-on experience in penetration testing and vulnerability assessment.
- Good knowledge of application security and network security principles.
- Practical experience with penetration testing tools such as Burp Suite, Metasploit, Nmap, and Wireshark.
- Ability to write scripts or automate tasks using Python, Bash, or PowerShell.
- Awareness of cloud security concepts across Azure and AWS.
- Security certifications such as OSCP, CEH, GPEN, or similar credentials are an advantage.
Additional information
Applications may be submitted through the application system or by email to sg-rscontracting@morganmckinley.com. Only shortlisted candidates will be contacted.
Privacy notice
By submitting personal data and your CV, you consent to Morgan Mckinley Pte Ltd and its affiliates collecting, using, and disclosing your personal data for the purposes described in the Privacy Policy. You confirm that you have read, understood, and agreed to the policy.
Company registration details
Morgan Mckinley Pte Ltd. Contact: Koh Boon Sien. EA Licence No: 11C5502. EA Registration No: R1110345.