9 TAMPINES STREET 92 East Region (Singapore) Singapore
职位描述
岗位职责
Pre-Requisition:
Degree in Computer Engineering, Computer Science, Information Systems, Digital Forensics or equivalent qualifications
Minimum 2 years’ of relevant work experience in IT security implementation and operations
Strong background in executing comprehensive penetration tests and vulnerability assessments across domains (Web, Mobile, API, Network/Infrastructure), as well as source code reviews.
Good interpersonal skills and a team player
Strong presentation and writing skills
Job Description:
Perform penetration tests (Web, Mobile, API, Network/Infrastructure). Assessments involve manual testing and analysis as well as the use of automated application vulnerability scanning/testing and/or code review tools. i.e. Nessus, Burp Suite Professional, HP Fortify
Perform source code review for applications using both automated tools (i.e. HP Fortify, Checkmarx) and manual testing.
Write and present comprehensive security assessment report/findings and support customer in assessing mitigations and remediation options.
Provide support for potential clients in project scoping and effort estimation, including identifying attack surfaces within network and application architecture.
Work on improvements for provided security services, including the continuous enhancement of existing methodology material and supporting assets.
Technical Skill sets:
Possessed OSCP or attained CREST CRT
Several years of experience developing web and/or mobile applications, i.e. financial, e-commerce, or internet-facing business applications.