Web Application Vulnerability Researcher

2 days ago

Singapore InnoEdge Labs Pte. Ltd. Full time $80,000 - $120,000 per year

At InnoEdge, we work with organisations to protect them from cyber threats. We help detect new unknown cyber threats through research, fortify networks, and defend critical information infrastructures. Based in Singapore, our team consists of cybersecurity experts who use the advanced techniques and technologies to deliver cutting-edge solutions and services.

InnoEdge believes in fostering a culture where team members are encouraged to overcome challenges, explore new ideas, and work together to succeed. We value individuals who are determined to push beyond the boundaries, and have a thirst for knowledge, continuous learning, and self-improvement.

Collaboration is key to our success. We prioritise open communication, constructive feedback, and a willingness to help others. We are committed to creating a supportive work environment that encourages excellence, innovation, and continuous improvement. We're looking for individuals who share our values and are excited to join us on our cyber mission.

Responsibilities
  • Recommend direction for research projects and conceptualize new tools/techniques that will enhance the vulnerability discovery process.
  • Mentor and guide new researchers in the area of web application vulnerability research.
  • Perform deep research into web applications with complex codebases to understand the attack surface for an attacker to abuse.
  • Ideate hypothesis as to how an attacker could possibly abuse features in the application and validate if hypothesis holds true.
  • Develop proof of concept to demonstrate the severity of the discovered vulnerability and propose mitigations.
  • Develop cutting edge tools to improve and scale up the vulnerability discovery process for web applications.
  • Keep abreast of the latest research into web security and vulnerabilities detection techniques.
  • Level up the local security community through mentorship of aspiring security researcher, publishing blog post and speaking at conferences.

Requirements

  • Demonstrated ability to
    • Perform attack surface analysis and prioritization of research on a web application.
    • Independently apply static/dynamic analysis techniques to find low lying bugs in a web application.
    • Discover and exploit vulnerability in web applications.
  • Deep understanding of web programming languages (PHP, Java, Python, .Net…), web frameworks, typical web vulnerabilities and how they are commonly exploited.
  • Track record of having found vulnerabilities in the last 4 years.

For a more senior role, we're looking for candidates with:

  • Fluency in assembly language (x86/64)
  • Experience in debugging, reverse engineering binary and exploiting memory corruption and logic vulnerabilities.
  • Track records in these areas:
    • Consistency in discovering security-related vulnerabilities and demonstrating their impact.
    • Performing research on a complex web application by a major vendor (e.g. WordPress), applying attack surface analysis and prioritization, and performing various static and dynamic analysis techniques to find bugs in the different components.
    • Discovering and exploiting security vulnerabilities in in a complex application by a major vendor (e.g. Exchange, WordPress).

Benefits

  • Training & Development
  • Performance Bonus
  • Medical Benefits
  • Hybrid Work Arrangement

If you meet these qualifications and are passionate about cyber security, we encourage you to apply for this exciting opportunity. We offer competitive compensation, a comprehensive benefits package, and a collaborative and dynamic work environment.

  • Cyber Security Vulnerability Researcher

    1 week ago

    Singapore Centre for Strategic Infocomm Technologies (CSIT) Full time

    Cyber Security Vulnerability Researcher (Web Applications) Join to apply for the Cyber Security Vulnerability Researcher (Web Applications) role at Centre for Strategic Infocomm Technologies (CSIT) . Get AI-powered advice on this job and more exclusive features. Conduct research and analysis to understand web application architectures, discovering...

  • Web Application Vulnerability Researcher

    4 days ago

    Singapore InnoEdge Labs Pte. Ltd. Full time

    At InnoEdge, we work with organisations to protect them from cyber threats. We help detect new unknown cyber threats through research, fortify networks, and defend critical information infrastructures. Based in Singapore, our team consists of cybersecurity experts who use the advanced techniques and technologies to deliver cutting-edge solutions and...

  • Vulnerability Researcher

    2 days ago

    Singapore InnoEdge Labs Pte. Ltd. Full time $100,000 - $150,000 per year

    At InnoEdge, we work with organisations to protect them from cyber threats. We help detect new unknown cyber threats through research, fortify networks, and defend critical information infrastructures. Based in Singapore, our team consists of cybersecurity experts who use the advanced techniques and technologies to deliver cutting-edge solutions and...

  • Cyber Security Vulnerability Researcher

    1 week ago

    Singapore Centre for Strategic Infocomm Technologies (CSIT) Full time

    Cyber Security Vulnerability Researcher (Windows)Join to apply for the Cyber Security Vulnerability Researcher (Windows)role at Centre for Strategic Infocomm Technologies (CSIT)We are looking for passionate individuals to be part of our vulnerability research team dedicated to keeping our Windows platform and software safe. In this role, you will be part of...

  • Cyber Vulnerability Researcher

    4 days ago

    Singapore ENSIGN INFOSECURITY (CYBERSECURITY) PTE. LTD. Full time

    **Duties and Responsibilities** - Develop and enhance processes and tools for the discovery and triage of vulnerabilities. - Research into new vulnerability discovery techniques and processes. **Requirements**: - Bachelor's degree in a computer science or engineering field or equivalent a minimum of 3 years of relevant experience. - Up-to-date knowledge on...

  • Vulnerability/ Cybersecurity Analyst, Researcher

    4 days ago

    Singapore SEARCH STAFFING SERVICES PTE. LTD. Full time

    We are currently working with a German MNC client; looking for a Vulnerability Researcher with cybersecurity work experience to join them. **Vulnerability Researcher **Responsibilities**: - Identify and analyze security weaknesses and flaws in software, hardware, or systems - Analyzing code, protocols, and configurations for security issues - Penetration...

  • Cyber Security Vulnerability Researcher

    1 week ago

    Singapore Centre for Strategic Infocomm Technologies (CSIT) Full time

    Cyber Security Vulnerability Researcher (Network Devices)Join to apply for the Cyber Security Vulnerability Researcher (Network Devices)role at Centre for Strategic Infocomm Technologies (CSIT)Cyber Security Vulnerability Researcher (Network Devices)3 weeks ago Be among the first 25 applicants Join to apply for the Cyber Security Vulnerability Researcher...

  • Infrastructure Vulnerability Assessment Analyst

    4 days ago

    Singapore Citi Full time

    **Qualifications**: Pre-requisites for this position are at least a bachelor's degree with 3 - 7 years of experience on most of the following: - Identifying, researching, validating, and exploiting various different known and unknown security vulnerabilities on server and client side - Vulnerability Assessment tools, e.g. Nessus, Qualys, etc. - Deep...

  • Cyber Security Vulnerability Researcher

    3 days ago

    Singapore Ministry of Defence Singapore Full time $90,000 - $120,000 per year

    Centre for Strategic Infocomm TechnologiesPermanentWhat you will be working on• Investigate vulnerabilities/threats and assess the impact on mobile devices and apps.• Conduct research to gain in-depth understanding of Andriod and iOS architecture (kernel and subsystems) and how these subsystems could be exploited by malware.• Perform information...

  • Cyber Security Vulnerability Researcher

    3 days ago

    Singapore Ministry of Defence Singapore Full time $80,000 - $120,000 per year

    Centre for Strategic Infocomm TechnologiesPermanentWhat the role isJob ScopePerform information security assessments through vulnerability research, penetration testing, code auditing, black box testing, reverse engineering, proof-of-concept simulations and malware analysisWhat we are looking for• Degree in Infocomm Security, Computer Science,...