Role: Penetration Tester (Web & Mobile Apps) ·
Company: Seven365 · Location: Singapore
GateClash (*************) checks the websites and apps of small businesses in Singapore for security problems and gets them fixed. We are adding a human-led penetration testing service, and you will be our first tester.
What you will do
- Run penetration tests on websites, APIs, and Android and iOS apps.
- Agree the scope and rules with each client before testing, and test only what they approve.
- Check and confirm the issues our automated scans find.
- Write clear reports: a plain-English summary for business owners and technical steps for developers.
- Retest after fixes to confirm each issue is closed.
- Build our testing checklist and report template.
- Help us apply for and keep our CSA Penetration Testing Service Licence.
Certifications you must have
- OSCP or OSCP+ (OffSec Certified Professional). Required.
Plus at least one of these is preferred:
- OSWE (OffSec Web Expert), for advanced web app testing
- CREST CRT (Registered Penetration Tester)
Experience you must have
- At least 2 years of real penetration testing for clients.
- Web and API testing with Burp Suite Professional.
- Mobile app testing (for example with Frida or MobSF).
- Clear written English.
- Able to pass a background check for the CSA licence.