SECURITY CONSULTANT (Penetration Testing)

Atos is seeking a Security Consultant specializing in penetration testing for its Singapore location.

Core Responsibilities & Technical Requirements

• Perform compliance testing of mobile applications against technology security standards and regulatory or industry requirements, including MAS TRM and OWASP MSTG.
• Apply in-depth knowledge of iOS and Android architecture and underlying security mechanisms.
• Conduct secure code reviews of Swift, Kotlin, Objective-C, and Java applications.
• Use reverse-engineering tools such as IDA Pro, Ghidra, and the Frida hooking framework or equivalent.
• Knowledge of ARM architectures such as armeabi-v7a and arm64-v8a is advantageous.
• Analyze and bypass mobile application security mechanisms, including SSL pinning, root or jailbreak detection, anti-tampering, and in-app VPN controls.
• Develop Burp extensions to support mobile and web application testing.
• Conduct web application penetration tests using industry-standard methodologies.
• Perform comprehensive source-code reviews across mobile, web, and backend languages.
• Conduct web and infrastructure security testing.

Qualifications & Skills

• Bachelor’s degree in Computer Science, Information Security, or a related discipline.
• Minimum two years of hands-on penetration testing or relevant offensive security experience.
• CREST CRT certification is mandatory.
• Certifications such as OSCP, OSCE, OSEE, OSWE, Red Teaming, Cloud Security, or Artificial Intelligence security credentials are advantageous.
• Excellent oral and written communication skills, including the ability to present technical findings.
• Strong organizational and time-management skills, with the ability to manage multiple engagements and meet tight deadlines.
• Self-motivated, proactive, and able to work independently or as part of a team.

Atos promotes diversity and inclusion and is committed to a fair work environment.