Penetration Tester

Role: Penetration Tester (Web & Mobile Apps) ·

Company: Seven365 · Location: Singapore

GateClash (gateclash.com) checks the websites and apps of small businesses in Singapore for security problems and gets them fixed. We are adding a human-led penetration testing service, and you will be our first tester.

What you will do

•Run penetration tests on websites, APIs, and Android and iOS apps.

•Agree the scope and rules with each client before testing, and test only what they approve.

•Check and confirm the issues our automated scans find.

•Write clear reports: a plain-English summary for business owners and technical steps for developers.

•Retest after fixes to confirm each issue is closed.

•Build our testing checklist and report template.

•Help us apply for and keep our CSA Penetration Testing Service Licence.

Certifications you must have

•OSCP or OSCP+ (OffSec Certified Professional). Required.

Plus at least one of these is preferred:

•OSWE (OffSec Web Expert), for advanced web app testing

•CREST CRT (Registered Penetration Tester)

Experience you must have

•At least 2 years of real penetration testing for clients.

•Web and API testing with Burp Suite Professional.

•Mobile app testing (for example with Frida or MobSF).

•Clear written English.

•Able to pass a background check for the CSA licence.