Penetration Tester - LANTU EMPLOYMENT AGENCY PTE. LTD.

Roles & Responsibilities

Job Summary :

We are seeking a highly skilled Penetration Tester to join our cybersecurity team. In this role, you will be responsible for performing advanced penetration tests on networks, web applications, and systems to identify vulnerabilities and recommend security improvements. The ideal candidate will have experience with various security frameworks, offensive security techniques, and the ability to work both independently and in a team. Holding a CRT (CREST Registered Tester) certification is preferred but not mandatory. You will collaborate with stakeholders to improve the security posture of the organization and its clients.

Key Responsibilities :

• Perform in-depth penetration tests on a wide range of environments, including networks, web applications, mobile applications, and cloud infrastructure.
• Identify and exploit vulnerabilities, and provide actionable remediation recommendations.
• Develop and execute custom test cases, scenarios, and scripts to simulate attack vectors.
• Create detailed reports that clearly communicate findings, risk levels, and suggested mitigation strategies to both technical and non-technical stakeholders.
• Stay up-to-date with the latest cybersecurity threats, vulnerabilities, and technologies.
• Collaborate with development, IT, and security teams to address identified security weaknesses and verify fixes.
• Provide technical advice on security best practices and strategies for securing information systems.
• Assist in threat modeling and security architecture reviews.
• Support red team engagements and simulated attack scenarios.
• Ensure testing methodologies are aligned with industry standards such as OWASP , NIST , CIS Controls , and MITRE ATT&CK framework.
• Participate in security incident response when required, assisting in post-incident forensic investigations.

Requirements :

Preferred Qualifications :

Tell employers what skills you have

Excellent Communication Skills

CEH

Remediation

Application Security

Vulnerability Scanning

Wireshark

Vulnerability Management

Information Technology

Penetration Testing

Python

Operating Systems

Windows

Mobile Applications

Docker

Web Applications

Threat & Vulnerability Management

Vulnerability Assessment

Linux

CISSP

Threat and Vulnerability Management