Security Testing Specialist

About the role

OCBC, Singapore's oldest bank, is hiring a Security Testing Specialist to help safeguard its systems and networks from cyber threats. The role works closely with engineering teams to identify and mitigate risks and to protect customer assets and data.

Key responsibilities

• Perform application penetration testing on web-based applications, APIs and mobile applications across different platforms
• Perform network penetration testing and exploit vulnerabilities to gain access to remote systems
• Document security issues found during assessments and recommend mitigation controls
• Research emerging security topics and attack vectors
• Conduct compliance testing against Technology Security Standards and regulatory requirements such as MAS TRMG
• Perform secure code reviews and thick-client penetration testing when required

Required profile

• Minimum 3 years of hands-on penetration testing experience for web apps, mobile apps and APIs
• Degree in computer science, computer engineering or information security, or equivalent
• Certification from GIAC, Offensive Security or CREST
• Experience in banking penetration testing in Singapore highly preferred; AS400 and mainframe code review experience is an advantage

Required skills

• Hands-on use of Kali Linux, Burp, Tenable and other penetration testing and secure code review tools
• Working knowledge of information security and familiarity with MAS TRMG and other regulatory requirements
• Good spoken and written communication, able to work independently and in a team

What we offer

• Competitive base salary
• Holistic, flexible benefits and community initiatives
• Learning and professional development opportunities