Senior Penetration Testing Engineer (Cybersecurity & AI Assurance)

Application Process:

We are only accepting applications through our MS Forms application form:

https://forms.cloud.microsoft/r/F27mJAvZur

Please do not apply through LinkedIn Easy Apply. Only applications submitted through the MS Forms link above will be considered.

Company Description:

Artan Consulting Pte. Ltd. is a Singapore-based cybersecurity and AI assurance consulting firm providing advisory, audit, assessment, and training services. We work with organisations across cybersecurity governance, risk, compliance, technical security assessments, and assurance engagements.

Our work covers industry frameworks and standards including NIST CSF, NIST AI RMF, ISO 27001, ISO 42001, ISO 22301, SOC 2, MAS TRM, Cyber Trust Mark, and related cybersecurity requirements.

Role Description:

The Senior Penetration Testing Engineer is a full-time, on-site role based in Singapore.

The successful candidate will be responsible for conducting hands-on penetration testing and vulnerability assessments across enterprise environments, including web applications, APIs, networks, infrastructure, and other technology environments.

The role involves identifying and validating security vulnerabilities, performing exploitation where appropriate, assessing technical risk, and producing clear technical and executive-level reports with practical remediation recommendations.

You will work closely with client security teams, consultants, and other stakeholders throughout the assessment lifecycle, from scoping and testing through reporting, remediation discussions, and closure.

Depending on the engagement, the role may also involve participation in red team, purple team, and adversary simulation activities.

Qualifications:

• Strong hands-on experience in penetration testing and vulnerability assessment.
• Strong experience testing Web Applications, APIs, Networks, and Infrastructure.
• Good understanding of common attack techniques, exploitation, privilege escalation, lateral movement, and post-exploitation activities.

Searching for Cyber Security roles that provide visa sponsorship? Connect with international employers through Cyber Security Jobs with Visa Sponsorship opportunities actively seeking talented professionals.

• Hands-on experience with tools such as Burp Suite, Kali Linux, Nmap, Metasploit, Wireshark, and other commonly used penetration testing tools.
• Experience with scripting using Python, Bash, PowerShell, or similar languages is an advantage.
• Strong understanding of vulnerability identification, validation, risk assessment, and remediation.
• Ability to prepare high-quality technical reports as well as executive-level summaries.
• Strong analytical, problem-solving, documentation, and communication skills.
• Ability to communicate security findings clearly to both technical and non-technical stakeholders.
• Experience contributing to red team, purple team, or adversary simulation exercises is an advantage.
• Familiarity with cloud security testing and modern application environments is an advantage.
• Relevant offensive security certifications are an advantage.

Key Requirements / Eligibility Criteria:

We are looking for experienced penetration testing professionals to support long-term security assessment engagements for one of Singapore's leading financial institutions.

We are looking for candidates with:

✅ 6–14 years of hands-on experience in VAPT / Penetration Testing

✅ Strong hands-on experience in Web Application Penetration Testing

✅ Strong hands-on experience in API Security Testing

✅ Strong experience in Network and Infrastructure Penetration Testing

✅ Experience identifying, validating, exploiting, and clearly documenting security vulnerabilities

✅ Strong experience preparing technical penetration testing reports and executive summaries

✅ Ability to communicate findings, risks, and remediation recommendations effectively with client stakeholders

✅ Experience working in structured enterprise security environments

Nice to have:

➕ Banking or Financial Services security testing experience

➕ Red Team / Purple Team / Adversary Simulation experience

➕ Cloud security testing experience

➕ Relevant offensive security certifications

📍 Location: Singapore — On-site

💼 Employment Type: Full-Time

📅 Opportunity: Long-Term

🇸🇬 Candidates already based in Singapore are strongly encouraged to apply.

🌏 For exceptional overseas candidates, work visa sponsorship may be considered, subject to eligibility and business requirements.

To apply, please complete the MS Forms application:

https://forms.cloud.microsoft/r/F27mJAvZur

Applications submitted through LinkedIn Easy Apply will not be considered.