Job Description: VAPT Engineer
Role: Vulnerability Assessment and Penetration Testing (VAPT) Engineer
Job Summary
We are looking for a skilled VAPT Engineer to identify, assess, and manage security vulnerabilities across applications, networks, systems, and cloud environments. The ideal candidate should have hands-on experience in penetration testing, vulnerability assessment, security testing tools, and remediation validation.
Key Responsibilities
- Perform vulnerability assessments and penetration testing on web applications, APIs, networks, servers, and infrastructure.
- Conduct security testing to identify vulnerabilities, misconfigurations, and potential attack vectors.
- Use industry-standard tools to perform automated and manual security testing.
- Identify, validate, and prioritize vulnerabilities based on risk and business impact.
- Prepare detailed VAPT reports with findings, risk ratings, and remediation recommendations.
- Work with development, infrastructure, and security teams to remediate identified vulnerabilities.
- Conduct retesting to verify remediation effectiveness.
- Follow recognized security standards and methodologies, including OWASP, PTES, and NIST.
- Stay updated on emerging threats, attack techniques, and security vulnerabilities.
Required Skills and Qualifications
- Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related field.
- Hands-on experience in Vulnerability Assessment and Penetration Testing (VAPT).
- Strong knowledge of web application, API, network, and infrastructure security testing.
- Experience with tools such as Burp Suite, Nmap, Nessus, OpenVAS, Metasploit, and OWASP ZAP.
- Good understanding of OWASP Top 10, CVEs, CVSS, and common attack techniques.
- Knowledge of operating systems, networking protocols, TCP/IP, Linux, and Windows.
- Familiarity with vulnerability management, security reporting, and remediation processes.
- Strong analytical, troubleshooting, documentation, and communication skills.
Preferred Qualifications
- Relevant certifications such as CEH, OSCP, CompTIA PenTest+, eJPT, or GPEN.
- Exposure to cloud security testing across AWS, Azure, or GCP.
- Knowledge of mobile application security testing and secure code review.
- Familiarity with compliance and security standards such as ISO 27001 and PCI DSS.
Key Competencies
- Strong attention to detail and problem-solving skills.
- Ability to work independently and collaboratively with technical teams.
- Ability to communicate security risks and practical remediation measures effectively.
Pay: RM4,000.00 - RM5,000.00 per month
Benefits:
- Health insurance
- Maternity leave
- Opportunities for promotion
- Professional development
Application Question(s):
- Can you join within 30 days
Experience:
Work Location: In person