Full Time Senior Penetration Tester Jobs, in Talent Porter Federal Territory - Maukerja

Confidential Hiring | Kuala Lumpur

Talent Porter is representing a confidential client seeking an experienced Senior Penetration Tester from a cybersecurity vendor, penetration testing consultancy or security services provider.

The role involves delivering hands-on penetration testing and offensive security assessments for external clients across application, network and cloud environments.

Key Responsibilities

• Conduct penetration testing across web applications, APIs, mobile applications and network infrastructure.
• Identify, validate and exploit vulnerabilities involving authentication, access controls, application security and infrastructure configurations.
• Execute red team exercises and adversary simulations to assess real-world attack scenarios and security controls.
• Perform vulnerability analysis using recognised methodologies such as OWASP and MITRE ATT&CK.
• Prepare technical reports documenting exploitation evidence, risk ratings and remediation recommendations.
• Review technical findings and present security assessment results to clients.

Required Skills and Experience

• At least 4 years of hands-on penetration testing or offensive security experience.
• Previous experience with a cybersecurity vendor, penetration testing consultancy or security services provider, delivering assessments for external clients.
• Strong practical experience in web application, API, network and mobile application penetration testing.
• Experience with vulnerability exploitation, privilege escalation and attack path analysis.
• Hands-on exposure to red team exercises and adversary simulation.
• Understanding of OWASP, MITRE ATT&CK and common exploitation techniques.
• Experience preparing technical penetration testing reports and remediation recommendations.
• Extensive hands-on experience conducting complex penetration testing across web applications, APIs, network infrastructure, cloud environments, and Active Directory, with strong capability in vulnerability exploitation and attack-path analysis.
• Familiarity with Burp Suite, Nmap, Metasploit, Nessus or similar tools.

Preferred Qualification

• Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, or a related field, or equivalent relevant professional experience
• OSCP, CREST CRT or equivalent certifications.

Note: Recruitment managed by Talent Porter on behalf of a confidential client.