Cyber Security Consultant

ABeam Consulting Malaysia; Petaling Jaya; On-site; MYR 60,000 - 120,000; Full time

Job summary

ABeam Consulting Malaysia seeks a cybersecurity professional to perform comprehensive vulnerability assessment and penetration testing across internal and external infrastructure, servers, endpoints, networks, web apps, and cloud environments. You will conduct asset discovery, scanning, and manual validation within approved scope, and present clear risk-based remediation guidance to clients.

The role requires a solid foundation in TCP/IP, Windows/Linux environments, AD, and OWASP/CVE awareness,

Qualifications

• Bachelor's degree in Cybersecurity, Computer Science, Information Security, Information Technology, Networking, or related field.

Responsibilities

• Perform VAPT for internal/external infra, servers, endpoints, network devices, apps, and cloud.
• Asset discovery, enumeration, scanning, manual validation, exploitation, and config checks.
• Validate vulnerabilities to reduce false positives and assess real risk.
• Run penetration tests with approved tools and RoE.
• Map findings to CVSS, CWE, OWASP, MITRE ATT&CK.
• Create technical VAPT reports, executive summaries, registers, checklists, evidence.
• Present results to technical teams and clients, explaining risks and remediations.
• Provide remediation support: clarify findings, review evidence, re-scan.
• Collaborate with infra, network, cloud, app, and security teams for remediation.
• Assist presales: scope, effort estimates, proposals, client discussions.
• Research emerging vulnerabilities and attack techniques.
• Develop OT/ICS, cloud, red team, and config review capabilities.

Skills

VAPT

TCP/IP

Windows/Linux

Active Directory

Web technologies

Security vulnerabilities

Manual validation

Scripting

Communication

Stakeholder comms

Education

Bachelor's degree in Cybersecurity/CS/Info Sec/IT/Networking

Tools

Nmap

Nessus

Burp Suite

Metasploit

Nikto

Nuclei

Wireshark

Kali Linux

Job description

• Perform Vulnerability Assessment and Penetration Testing (VAPT) for internal and external infrastructure, servers, endpoints, network devices, web applications, and cloud environments.
• Conduct asset discovery, service enumeration, vulnerability scanning, manual validation, exploitation testing, and security configuration assessments within the approved scope.
• Validate identified vulnerabilities to minimize false positives and determine actual security impact and associated risk.
• Perform penetration testing activities using appropriate tools and methodologies while adhering to client-approved Rules of Engagement (RoE).
• Analyze vulnerabilities and map findings to relevant standards and references such as CVSS, CWE, OWASP, and MITRE ATT&CK, where applicable.
• Prepare professional technical VAPT reports, executive summaries, vulnerability registers, assessment checklists, and supporting evidence.
• Present assessment results to technical teams, management, and client stakeholders, clearly communicating identified risks and recommended remediation.
• Provide post-assessment remediation support, including clarification of findings, remediation recommendations, evidence review, vulnerability re-scanning, and revalidation.
• Work closely with infrastructure, network, cloud, application, and security teams to support effective vulnerability remediation.
• Support cybersecurity presales activities including scope clarification, effort estimation, technical proposal preparation, and client discussions when required.
• Continuously research emerging vulnerabilities, attack techniques, security tools, and industry cybersecurity trends.
• Develop additional capabilities in OT/ICS security assessment, cloud security assessment, red teaming, and security configuration review based on business and project needs.

Requirements

• Bachelor's degree in Cybersecurity, Computer Science, Information Security, Information Technology, Networking, or a related field.
• Knowledge or hands-on experience in Vulnerability Assessment and Penetration Testing (VAPT).
• Good understanding of TCP/IP, network protocols, Windows/Linux environments, Active Directory, web technologies, and common security vulnerabilities.
• Experience or familiarity with security assessment tools such as Nmap, Nessus, Burp Suite, Metasploit, Nikto, Nuclei, Wireshark, Kali Linux, or equivalent tools.
• Understanding of common vulnerability categories including OWASP Top 10, insecure configurations, outdated software, authentication weaknesses, network/service exposure, and access-control issues.
• Ability to perform manual vulnerability validation and distinguish exploitable security issues from scanner-generated false positives.
• Basic scripting or automation knowledge using Python, PowerShell, Bash, or equivalent is an advantage.
• Ability to prepare clear technical documentation, assessment evidence, and professional cybersecurity reports.
• Strong analytical and troubleshooting skills with willingness to continuously learn new security technologies and attack techniques.
• Good verbal and written communication skills and ability to coordinate with technical and non-technical stakeholders.
• Business-level proficiency in English and Malay is mandatory; proficiency in other languages is an advantage for stakeholder communication in multinational environments.