AppSec Engineer: Red Team & Pen Test

iFAST Global Hub AI Sdn Bhd; Kuala Lumpur; On-site; MYR 120,000 - 180,000; Full time

Benefits offered by this job

Employee share options

Insurance coverage

Snacks & beverages

Annual leave 21 days

Job summary

iFAST Global Hub AI Sdn Bhd in Malaysia is seeking a Cyber Security Engineer (Red Team & Penetration Test) to identify vulnerabilities in web, mobile, and API apps. You will collaborate with developers and DevSecOps to fix issues.

You will conduct security assessments, run red team exercises, provide secure design guidance, and help remediate findings while integrating security into the CI/CD pipeline. Ideal candidates have 2–4 years in pen testing or app sec, and certifications such as

Qualifications

• Bachelor’s degree or equivalent in CS or cybersecurity.
• 2–4 years in penetration testing or application security.
• Hands-on with Burp Suite, Metasploit and Nmap.
• Proficient in Python or Java.
• Certifications such as OSCP/OSEP are a plus.

Responsibilities

• Perform security assessments of web, mobile and API applications.
• Plan and run red team exercises within agreed rules of engagement.
• Provide security consulting on secure design, architecture reviews and threat modelling.
• Remediate findings with developers and retest fixes.
• Collaborate with DevOps to build security tooling for CI/CD.

Skills

Penetration testing

Threat modelling

Security assessments

Secure coding practices

Analytical thinking

DevSecOps

Problem solving

Education

Bachelor's degree in computer science or cybersecurity

Tools

Burp Suite

Metasploit

Nmap

Linux

Windows

Job description

iFAST Global Hub AI Sdn Bhd in Malaysia is seeking a Cyber Security Engineer (Red Team & Penetration Test) to identify vulnerabilities in web, mobile, and API apps. You will collaborate with developers and DevSecOps to fix issues.

You will conduct security assessments, run red team exercises, provide secure design guidance, and help remediate findings while integrating security into the CI/CD pipeline. Ideal candidates have 2–4 years in pen testing or app sec, and certifications such as