Application Security Tester

Testbits Sdn Bhd; Kuala Lumpur; On-site; MYR 60,000 - 80,000; Full time

Job summary

A technology company in Kuala Lumpur is seeking an experienced Application Security Tester to perform various application security testing tasks. The role involves identifying and supporting remediation of security vulnerabilities across web, mobile, and API-based applications. Ideal candidates will have at least two years of experience with application security testing, a relevant bachelor’s degree, and a good understanding of OWASP Top 10 vulnerabilities. Strong collaboration skills with development and security teams are essential for this role.

Qualifications

• Minimum of 2 years of hands-on experience in application security testing.
• Good understanding of OWASP Top 10 and common application vulnerabilities.
• Ability to work independently and communicate security risks clearly.

Responsibilities

• Perform application security testing including SAST, DAST, mobile, and API security testing.
• Conduct secure code reviews and security risk analysis.
• Prepare concise security testing reports and risk summaries.

Skills

Application Security Testing

SAST

DAST

Mobile Security Testing

API Security Testing

Collaboration

Security Risk Analysis

Secure Code Reviews

Education

Bachelor’s degree in Computer Science, Information Technology, or a related field

Tools

JMeter

Job description

We are seeking an experienced Application Security Tester to perform application security testing and ensure systems meet required security, compliance, and risk standards. The role involves identifying, validating, and supporting remediation of security vulnerabilities across web, mobile, and API-based applications in a complex environment.

Key Responsibilities

• Perform application security testing including SAST, DAST, Mobile, and API security testing.
• Conduct secure code reviews and security risk analysis to identify
• Execute security scans and assessments using industry-standard tools.
• Analyse findings, validate vulnerabilities, and provide clear remediation recommendations.
• Collaborate with development, QA, DevOps, and security teams to support vulnerability fixing.
• Prepare concise security testing reports and risk summaries for stakeholders.

Qualifications

• Educational Background:
• Bachelor’s degree in Computer Science, Information Technology, or a related
• Experience:
• At least 2 years of hands-on experience in performance testing, specifically
• using JMeter in complex and integrated Telco systems or similarly large-scale

Requirements

• Bachelor’s degree in Computer Science, IT, or related field.
• At least 2 years of experience in application security testing for enterprise or
• Hands-on experience with SAST, DAST, mobile, and API security testing tools.
• Good understanding of OWASP Top 10, common application vulnerabilities, and
• secure coding practices.
• Experience testing integrated systems including APIs, middleware, and backend services.
• Ability to work independently with minimal supervision and communicate security risks clearly.
• Preferred Certifications:
• ISTQB CTFL or equivalent certification.
• Experience in Agile and Scrum environments is a plus.