Cyber Security Engineer (Red Team & Penetration Test)

iFAST Corp; Kuala Lumpur; On-site; MYR 120,000 - 180,000; Full time

Job summary

iFAST Corporation is seeking a Cyber Security Engineer specializing in Red Team and Penetration Testing. You will perform security assessments of web, mobile, and API apps, collaborate with developers and DevSecOps to fix findings and improve the CI/CD pipeline.

You should have 2–4 years in security testing, hands-on with Burp Suite, Metasploit and Nmap, and strong OWASP/API security knowledge. OSCP/OSEP is a plus. Kuala Lumpur, Malaysia based role with hybrid possibilities.

Qualifications

• Bachelor’s degree in computer science, cybersecurity or related field, or equivalent experience.
• 2 to 4 years of experience in penetration testing, application security or red teaming.
• Hands-on with Burp Suite, Metasploit, Nmap; strong knowledge of OWASP Top 10 and API security.
• Good understanding of Linux, Windows, Active Directory, TCP/IP, cloud and container infrastructure.
• Proficient in Python or Java.
• Certifications such as OSCP, OSEP are a plus.
• Ability to think outside the box and communicate clearly.

Responsibilities

• Perform security assessments of web, mobile and API applications using threat modelling, code scanning and penetration testing.
• Plan and run red team exercises against applications and supporting infrastructure within agreed rules of engagement.
• Provide security consulting to development teams on secure design, architecture reviews and threat modelling.
• Work with developers to remediate findings, remove false positives from scan reports and retest fixes.
• Work with DevOps to build tools and automation that improve security in the CI/CD pipeline.
• Develop secure coding standards and train development teams on web and mobile secure coding.

Skills

Penetration testing

Application security

Threat modelling

Python

Java

Communication skills

Analytical skills

Cloud

Containers

Linux

Windows

Active Directory

Education

Bachelor’s degree in computer science, cybersecurity or related field

OSCP/OSEP or similar certifications

Tools

Burp Suite

Metasploit

Nmap

Job description

Cyber Security Engineer (Red Team & Penetration Test)

Job Overview

Job Summary

We are looking for an application security professional to find vulnerabilities and business logic weaknesses in our business applications. You will work with developers and DevSecOps to get them fixed.

Responsibilities:

• Perform security assessments of web, mobile and API applications using threat modelling, code scanning and penetration testing.
• Plan and run red team exercises against applications and supporting infrastructure within agreed rules of engagement.
• Provide security consulting to development teams on secure design, architecture reviews and threat modelling.
• Work with developers to remediate findings, remove false positives from scan reports and retest fixes.
• Work with DevOps to build tools and automation that improve security in the CI/CD pipeline.
• Develop secure coding standards and train development teams on web and mobile secure coding.

Requirements:

• Bachelor’s degree in computer science, cybersecurity or a related field, or equivalent experience.
• 2 to 4 years of experience in penetration testing, application security or red teaming.
• Hands-on with Burp Suite, Metasploit, Nmap and similar tools; strong knowledge of OWASP Top 10 and API security.
• Good understanding of Linux, Windows, Active Directory, TCP/IP, cloud and container infrastructure.
• Proficient in at least one scripting or programming language (e.g. Python, Java).
• Relevant certifications (OSCP, OSEP or similar) are a plus.
• Ability to think outside the box and find creative ways to bypass security controls and defenses.
• Excellent written and verbal communication skills.
• Strong analytical and problem-solving skills.

Why Join Us?

• Work on modern AppSec practices instead of traditional “checklist security”
• Gain hands-on exposure to AI-assisted security tooling and threat intelligence
• Collaborate directly with engineering teams on real-world systems
• Build highly transferable skills across security, cloud, DevOps, and AI-era engineering
• Grow your career in one of the fastest-evolving domains in tech

Experience Level

Entry level (i.e. Exec, Snr. Exec)

Bachelor's Degree

Language

Skillset

Experience in penetration testing or ethical hacking

From quick bites to caffeine boosts, we’ve got you fuelled throughout the day.

Yearly activities

Think outdoor activities, CSR initiatives to festive celebrations and learning days, we make time for experience that bring people together and create moments worth remembering.

Remuneration package

Competitive remuneration including performance-based shares that reward results and recognize excellence.

Coverage

Insurance and medical benefits that support your wellbeing and give you peace of mind, so you can focus on what matters.

Welcome lunch, teambuilding budget and sports allowance to support team bonding and an active lifestyle.

IT - Security Operations/ Technology Risk

share

Company Overview:

iFAST Corporation is a global digital banking and wealth management platform headquartered in Singapore,providing a comprehensive range of investment products and services to financial advisory firms, financial institutions, banks,internet companies, multinational companies, as well as retail and high net worth investors in Asia. The Group offers access to over17,000 investment products including funds, bonds and Singapore Government Securities (SGS), stocks, Exchange Traded Funds (ETFs), insurance products,and services including online discretionary portfolio management services (DPMS), research and investment seminars, financial technology (fintech) solutions,banking, pension administration, investment administration and transactions services. The company is also present in Hong Kong, Malaysia, China and UK.