Application Security Engineer (Pentester)

P2P; Kuala Lumpur; On-site; MYR 150,000 - 200,000; Full time

Job summary

Join a forward-thinking company as a Security Analyst, where you will play a crucial role in identifying and mitigating security vulnerabilities. This dynamic position involves conducting thorough security assessments, participating in agile scrum meetings, and implementing security controls. You will have the opportunity to lead training sessions and support application-level security monitoring. If you are passionate about cybersecurity and eager to make a significant impact in a collaborative environment, this role is perfect for you. Bring your expertise and help shape the future of secure digital experiences.

Qualifications

• Minimum four years of experience in Web API testing and proficiency in BurpSuite.
• Deep understanding of OWASP Top 10 and ability to detect logic flaws.

Responsibilities

• Discover security vulnerabilities through design and source code reviews.
• Conduct security-related training sessions and provide recommendations.

Skills

Security Vulnerability Assessment

Penetration Testing

Web API Testing

Incident Response

Fluency in English

Knowledge of OWASP Top 10

Education

OSCP Certification

Equivalent Security Certification (CREST)

Tools

BurpSuite

Job description

Responsibilities

• Discover security vulnerabilities through design review, source code review and penetration testing, either manually or by using automated tools, and follow up on the remediation process
• Participant in relevant agile scrum meetings and provide professional recommendations on the design of security controls, libraries, and/or protocols
• Conduct security-related training sessions
• Implement various security control verification and risk detection through automated scripts
• Provide support on application-level security monitoring, intrusion detection, and incident response

Requirements

• OSCP (or equivalent, such as CREST) is a MUST.
• A deep understanding of OWASP Top 10 and the ability to detect and address logic flaws are highly desirable.
• Minimum four years of experience in Web API testing and proficiency in using BurpSuite is preferred.
• Experience with Mobile App testing, comprehension of jailbreaking/rooting a device, API hooking, reverse engineering, and de-obfuscation is highly beneficial
• Fluency in spoken and written English is essential, and proficiency in Mandarin would be advantageous.