{"id":1502979,"url":"https://alion.io/job/dtcpay-senior-penetration-testing-engineer","title":"Senior Penetration Testing Engineer","company":{"id":175075,"name":"dtcpay","domain":"dtcpay.com","url":"https://alion.io/company/dtcpay","size_band":null,"is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":null,"truth_index":null},"role":"Security","role_family":"Security","seniority":"senior","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Singapore"],"countries":["SG"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":8000,"max":11000,"currency":"SGD","period":"month","gross":true,"usd_annual":103284},"salary_estimate":null,"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Burp Suite","optional":false},{"name":"Fortify","optional":false},{"name":"Frida","optional":false},{"name":"ISO 27001","optional":false},{"name":"Java","optional":false},{"name":"Nmap","optional":false},{"name":"OWASP Top 10","optional":false},{"name":"PCI DSS","optional":false},{"name":"PoC Library","optional":false},{"name":"Python","optional":false},{"name":"Red Teaming","optional":false},{"name":"SOC 2","optional":false},{"name":"Spring Boot","optional":false},{"name":"Spring MVC","optional":false},{"name":"SQL","optional":false},{"name":"SQLmap","optional":false},{"name":"CVE","optional":true}],"status":"live","first_seen_at":"2026-09-30T00:00:00Z","employer_posted_date":null,"last_verified_at":"2026-09-30T00:00:00Z","board_verified":false,"closed_at":null,"days_open":12,"trust":{"level":"not_scored","repost_count":null,"flags":[],"days_open":12},"description":"Job Responsibilities\nConduct comprehensive penetration testing of the company's and clients' web systems, applications, and internal network environments, identifying and verifying security vulnerabilities;\nIndependently execute the full penetration testing lifecycle: information gathering, vulnerability scanning, vulnerability verification, privilege escalation, lateral movement within internal networks, etc.;\nPerform in-depth analysis of common vulnerabilities including SQL injection, XSS, CSRF, command execution, insecure deserialization, and OWASP Top 10 vulnerabilities, and provide remediation recommendations;\nConduct code audits covering Java frameworks (Spring, Spring Boot, Spring MVC, MyBatis, etc.) and source-level identification of common web vulnerabilities;\nPerform mobile application (APP) security testing, including decompilation, hardening/reinforcement detection, static/dynamic analysis, and API penetration testing;\nIndependently prepare penetration testing reports and communicate technical findings with project teams and clients;\nParticipate in red team/blue team exercises and cyber defense drills, taking on responsibilities such as monitoring and analysis, attack attribution, and vulnerability remediation;\nMaintain familiarity with security frameworks such as MAS TRM, DORA, PCI DSS, ISO 27001, and SOC 2;\nAssist in delivering enterprise information security training to enhance internal security awareness.\nRequirements\nBasic Requirements\nBachelor's degree or above in Computer Science, Computer Engineering, or a related field;\n5+ years of experience in penetration testing / information security, with experience on both the client side and security vendor (consulting) side preferred;\nStrong ability to work independently, capable of taking on a project lead role and independently liaising with clients and project teams.\nTechnical Skills\nProficient in end-to-end penetration testing methodology, with hands-on experience in internal network penetration testing (tunneling via ICMP/LCX/SSH, pass-the-hash, pass-the-ticket, lateral movement via WMI/PsExec, etc.);\nProficient with security scanning and penetration testing tools such as AWVS, Nmap, SQLMap, Burp Suite, and AppScan;\nCapable of conducting Java code audits, familiar with tools such as Fortify and Eclipse, and vulnerability identification methods for common frameworks;\nProficient in Python development, with the ability to independently write security tools (directory scanners, subdomain scanners, C-segment scanners, protocol brute-forcing tools, PoC/exploit development, etc.);\nFamiliar with mobile application security testing, including APP decompilation (JADX, apktool), hardening/reinforcement identification, and dynamic testing with Frida;\nFamiliar with common middleware attack techniques and host security inspection procedures.\nNice to Have\nHolds security certifications such as OSCP, OSWE, CREST, or has proof of original CVE disclosures;\nProject experience with high-security clients in financial services, government, or large state-owned enterprises;\nExperience participating in large-scale red team, purple team, or threat-led penetration testing engagements;\nExperience in security technical sharing/training, or an active personal technical blog/open-source project portfolio.\nSkills\nApplications, Information Gathering, Computer Engineering, Vulnerability Scanning, Security Framework, Audit Frameworks, Team Training, Computer Science, Spring Boot, Static Analysis, PCI DSS, internal networking, Consulting, Security Consulting, MyBatis, Able To Work Independently","description_format":"text","description_chars":3591,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Penetration Testing","Information Security","Application Security","Vulnerability Management"],"lifecycle":[{"event":"open","at":"2026-09-30T04:00:44Z"}],"visa":[],"liveness":{"score":75,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.832,"p_room":0.9,"age_days":12,"expected_fill_days":22,"reasons":["seen:12","velocity","win:mid"],"computed_at":"2026-10-12T06:55:09Z"},"pay":{"stated_usd_annual":103284,"is_top_pay":false},"html_url":"https://alion.io/job/dtcpay-senior-penetration-testing-engineer","json_url":"https://alion.io/job/dtcpay-senior-penetration-testing-engineer.json","meta":{"generated_at":"2026-10-12T23:25:20Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":38495,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-13T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":175075},"rest":"https://alion.io/mcp/rest/get_company?id=175075"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fdtcpay-senior-penetration-testing-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fdtcpay-senior-penetration-testing-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fdtcpay-senior-penetration-testing-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/dtcpay-senior-penetration-testing-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fdtcpay-senior-penetration-testing-engineer"}]}