{"id":2971711,"url":"https://alion.io/job/red-alpha-cybersecurity-penetration-tester","title":"Penetration Tester","company":{"id":3802191,"name":"Red Alpha Cybersecurity","domain":"redalphacyber.com","url":"https://alion.io/company/red-alpha-cybersecurity","size_band":null,"is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":null,"truth_index":null},"role":"Security","role_family":"Security","seniority":"middle","employment_type":"contractor","work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"explicit","locations":["Singapore"],"countries":["SG"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":7000,"max":9000,"currency":"SGD","period":"month","gross":true,"usd_annual":84540},"salary_estimate":null,"experience_years_min":3,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Active Directory","optional":false},{"name":"Agentic Workflows","optional":false},{"name":"Kubernetes","optional":false},{"name":"Linux","optional":false},{"name":"Red Teaming","optional":false},{"name":"Windows","optional":false},{"name":"AWS","optional":true},{"name":"Azure","optional":true},{"name":"GCP","optional":true},{"name":"LLM","optional":true},{"name":"OWASP Top 10","optional":true},{"name":"Python","optional":true},{"name":"RAG","optional":true}],"status":"live","first_seen_at":"2026-10-21T00:00:00Z","employer_posted_date":null,"last_verified_at":"2026-10-21T00:00:00Z","board_verified":false,"closed_at":null,"days_open":6,"trust":{"level":"not_scored","repost_count":null,"flags":[],"days_open":6},"description":"We’re looking for a Penetration Tester who wants to do real security research across web, infrastructure, cloud, AI and mobile environments.\nOur work spans web applications, infrastructure and networks, cloud and Kubernetes environments, AI systems, mobile applications, and source code. For us, penetration testing is not just about running tools, it’s about understanding how systems work, challenging assumptions, and conducting real security research.\nYou’ll report to the Team Lead and work alongside a small team of security researchers in an international, collaborative, and highly technical environment. You’ll work independently on complex problems and together with the team on live client engagements.\nWe’re looking for someone curious and hungry to learn, someone who goes deep without being told to, would rather understand the system than simply run the tool, and genuinely enjoys security research.\n\nResponsibilites:\nConduct penetration testing and security research across web applications, infrastructure and networks, cloud and Kubernetes environments, AI systems, mobile applications, and source code\n\nTake ownership of security reporting. We use AI tools to accelerate drafting, but you are accountable for the final output — including technical accuracy, root-cause analysis, and real-world business impact\n\nPresent vulnerabilities, findings, and recommendations clearly to clients and their technical teams\n\nBuild internal security tools, methodologies, automation, and agentic workflows that enable the team to work faster and go deeper\n\nContribute to red team and adversary emulation engagements\n\nIndependently investigate unfamiliar technologies, attack surfaces, and complex technical problems\n\nMust Have Requirements:\n3+ years of hands-on experience in penetration testing and/or security research-mandatory\n\nDeep expertise in at least two of the following areas:\n\nWeb application penetration testing\n\nInfrastructure and network penetration testing, including Active Directory, with real fluency in Windows and Linux internals, the protocols underneath, and privilege escalation\n\nManual source code review and vulnerability research\n\nOSCP or CREST CRT certification- mandatory\n\nCurrently based in Singapore with valid work authorization- mandatory\n\nStrong research mindset, technical curiosity, and the ability to independently investigate unfamiliar technologies and attack surfaces\n\nHands-on experience using AI tools to support security testing, research, automation, or tool development, with a strong interest in exploring new AI-driven security workflows\n\nAbility to work independently on deep technical problems and collaboratively on live client engagements\n\nExcellent written and verbal English communication skills\n\nAvailability to work in a hybrid model in Singapore, including regular work at client sites\n\nNice to Have\nExisting CAT1 or CAT2A security clearance\n\nProficiency in Python or Node.js\n\nCREST CCT APP or CCT INF, or Offensive Security certifications beyond OSCP, such as OSWE, OSEP, or OSED\n\nSecurity research publications, strong CTF performance, or a demonstrated bug bounty track record\n\nExperience with mobile application penetration testing across Android and iOS, as well as thick-client testing\n\nCloud penetration testing experience across AWS, Azure, or GCP, including containers and Kubernetes\n\nRed team experience, including reconnaissance, adversary emulation, and stealth techniques\n\nAI security expertise, including prompt injection and indirect prompt injection, jailbreaks, RAG and agent security, and the OWASP Top 10 for LLM Applications\n\nDegree in Computer Science, Information Security, Engineering, or a related discipline — or equivalent practical experience\n\nSalary\nCommensurate with experience and qualifications\nSkills\nAi, Cyber Security, Active Directory, Escalation Management, Source Code Reviews, Scripting, Test Automation, Web Application Testing, Cloud Infrastructure, Penetration Testing, Operating Systems, Researching New Technologies, Linux, Security Research","description_format":"text","description_chars":4044,"description_truncated":false,"requirements":{"experience_years_min":3,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[{"name":"Singapore","iso":"SG","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Penetration Testing","Cybersecurity","Corporate Training","Information Security"],"lifecycle":[{"event":"open","at":"2026-10-21T02:28:30Z"}],"visa":[],"liveness":{"score":90,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.903,"p_room":1,"age_days":6,"expected_fill_days":30,"reasons":["seen:6","velocity","win:early"],"computed_at":"2026-10-27T05:46:45Z"},"pay":{"stated_usd_annual":84540,"is_top_pay":false},"html_url":"https://alion.io/job/red-alpha-cybersecurity-penetration-tester","json_url":"https://alion.io/job/red-alpha-cybersecurity-penetration-tester.json","meta":{"generated_at":"2026-10-27T10:35:24Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":12218,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-28T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":3802191},"rest":"https://alion.io/mcp/rest/get_company?id=3802191"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fred-alpha-cybersecurity-penetration-tester"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fred-alpha-cybersecurity-penetration-tester"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fred-alpha-cybersecurity-penetration-tester"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/red-alpha-cybersecurity-penetration-tester\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fred-alpha-cybersecurity-penetration-tester"}]}