Senior Cyber Security Consultant
Location: Malaysia
Department: Cyber Security, EGS
Employment Type: Full-Time
About the Role
Our client is seeking an experienced Senior Cyber Security Consultant to join our Cyber Security team. In this role, you will be responsible for delivering technical cybersecurity consulting, assessment, advisory, and incident response services to both internal and external clients. The ideal candidate possesses strong hands-on experience in vulnerability assessment and penetration testing (VAPT), security consulting, and technical security assessments, coupled with the ability to provide professional recommendations and reports to clients.
Key Responsibilities
- Conduct and deliver Vulnerability Assessments (VA) and Penetration Testing (PT) engagements for clients.
- Provide Cyber Security Advisory, Technical Consulting, and Security Assessment Services across various environments and technologies.
- Perform Incident Response, Digital Forensics Investigations, and Compromise Assessments.
- Deliver Cyber Drills, technical workshops, and cybersecurity awareness or technical training programs.
- Prepare and present high-quality technical reports, assessment findings, remediation recommendations, and client deliverables.
- Engage directly with clients to understand security requirements, identify risks, and recommend appropriate security controls and solutions.
- Stay updated on emerging cybersecurity threats, vulnerabilities, attack techniques, and industry best practices.
- Continuously enhance technical expertise and professional knowledge in cybersecurity domains.
- Perform any other duties assigned by management.
Requirements
- Minimum 3 to 5 years of experience in:
- Cyber Security Consulting
- Vulnerability Assessment & Penetration Testing (VAPT)
- Security Assessments
- Technical Cybersecurity Services
- Strong technical knowledge of cybersecurity principles, technologies, tools, and methodologies.
- Experience performing security assessments across network, web application, system, and infrastructure environments.
- Good consulting, analytical, problem-solving, and communication skills.
- Ability to prepare professional technical reports and present findings to stakeholders and clients.
- Experience in incident response, digital forensics, or compromise assessments is an added advantage.
Qualifications & Certifications
Mandatory:
- CREST Certification:
- CREST Practitioner Security Analyst (CPSA), OR
- CREST Registered Penetration Tester (CRT)
Preferred Certifications:
- Certified Ethical Hacker (CEH)
- Certified Ethical Hacker (CEH) Practical
- EC-Council Certified Security Analyst (ECSA)
Education:
- Bachelor's Degree in Cyber Security, Digital Forensics, Information Security, Computer Science, Information Technology, or a related discipline.
Ideal Candidate Profile
- Hands-on cybersecurity professional with proven experience in penetration testing and security consulting.
- Strong client-facing and stakeholder management capabilities.
- Able to work independently while managing multiple engagements.
- Passionate about cybersecurity and committed to continuous professional development.