DRSC Global Technology, Senior - Security Tester

Deloitte Southeast Asia; Kuala Lumpur; On-site; MYR 180,000 - 240,000; Full time

Job summary

Deloitte Southeast Asia in Kuala Lumpur is seeking a Senior Global Technology Security Tester to proactively identify and remediate security risks across applications and development environments. You will partner with developers, engineers and product teams to embed security throughout the software development lifecycle, leveraging automated and manual testing, risk assessment, and DevSecOps enablement.

The role requires strong knowledge of OWASP Top 10, hands-on tooling, scripting, and the

Qualifications

• Bachelor’s Degree or equivalent work experience.
• Experience in Static, Dynamic, Interactive Application Software Testing and Software Composition Analysis using tools such as Snyk, Fortify, Contrast.
• Knowledge of OWASP Top 10 for Web Apps, API, Open Source, and LLMs.
• Familiarity with CWE Top 25 and trends in public vulnerabilities and zero-days.
• Ability to read and write at least one scripting language (e.g., Python, PowerShell).
• Ability to read full stack languages/frameworks (e.g., C#, .NET, Java).
• Familiarity with DevOps tools (Azure Repos, Github, Azure Pipelines, Github Actions).
• Experience working with diverse stakeholders, preferably on a global basis.
• Strong prioritization and time-management skills.
• Excellent written and verbal communication with technical and non-technical stakeholders.

Responsibilities

• Conduct application security testing (DAST, SAST, SCA, container scanning, and manual verification).
• Analyze test results to determine contextual risk and explain threats to developers and teams.
• Provide remediation guidance on true positives from tests.
• Assist teams in integrating security testing into automated DevSecOps workflows (IDEs, code repos, image registries, CI/CD).

Skills

Security testing

DAST/SAST

OWASP Top 10

Python scripting

DevSecOps

CI/CD pipelines

Stakeholder mgmt

Global teams

Education

Bachelor’s degree

Tools

Snyk

Fortify

Contrast

Burp Suite

OWASP ZAP

Postman

Swagger

NMAP

SQLMap

Job description

Select how often (in days) to receive an alert:

DRSC Global Technology, Senior - Security Tester

Date: 13 Oct 2026

Location: Kuala Lumpur, MY

Are you ready to unleash your potential?

At Deloitte, our purpose is to make an impact that matters for our clients, our people, and the communities we serve. We believe we have a responsibility to be a force for good, and WorldImpact is our portfolio of initiatives focused on making a tangible impact on society’s biggest challenges and creating a better future. We strive to advise clients on how to deliver purpose-led growth and embed more equitable, inclusive as well as sustainable business practices. Hence, we seek talented individuals driven to excel and innovate, working together to achieve our shared goals. We are committed to creating positive work experiences that foster a culture of respect and inclusion, where diverse perspectives are celebrated, and everyone is recognised for their contributions. Ready to unleash your potential with us? Join the winning team now!

This role is responsible for proactively identifying, assessing, and helping remediate security risks acrossapplications and development environments. The Global Technology Security Tester partners closely with developers, engineers, and product teams to embed security throughout the software development lifecycle, ensuring applications are resilient against emerging threats while supporting secure, scalable, and efficientdelivery practices. Through a combination of automated testing, manual validation, risk assessment, and DevSecOps enablement, this individual plays a critical role in strengthening the organization's overall securityposture.

Key Responsibilities:

• Conduct application security testing in the form of DAST, SAST, SCA, container scanning, and manualverification techniques.
• Analyze source code and application security test results to determine contextual risk (via CVSS) andexplain threats to developers and application teams.
• Provide remediation guidance on true positive application security test results.
• Assist application teams in integrating application security testing into automated DevSecOps workflows (i.e.,IDEs, code repositories, image registries, and CI/CD pipelines), including deployment and troubleshootingsupport.

Your role as a leader

At Deloitte, we believe in the importance of empowering our people to be leaders at all levels. We connect our purpose and shared values to identify issues as well as to make an impact that matters to our clients, people and the communities. Additionally, Analysts across our Firm are expected to:

• Demonstrate a strong commitment to personal learning and development.
• Understand how our daily work contributes to the priorities of the team and business.
• Understand the set expectations and demonstrate accountability in keeping personal performance on track.
• Actively focus on developing effective communications and relationship-building skills with stakeholders, clients and team.
• Demonstrate an appreciation for working with others.
• Understand what is fundamental to Deloitte’s success as a business.
• Demonstrate integrity and an awareness of strengths, differences, and personal impact.
• Develop their understanding of Deloitte and offer a fresh perspective.

Requirements:

• Bachelor’s Degree or equivalent work experience
• Experience in conducting Static, Dynamic, Interactive Application Software Testing, and SoftwareComposition Analysis using common testing tools such as Snyk, Fortify, Contrast
• Security, Burp, OWASPZAP, Postman, Swagger, NMAP, SQLMap, and others
• Knowledge of OWASP Application Security Top 10 for Web Applications, API, Open Source, and LLMs
• Familiarity with the CWE Top 25 and recent trends in public vulnerabilities and zero-days
• Ability to both read and write with at least one scripting language (e.g., Python, Powershell, etc.)
• Ability to read and comprehend at least one full stack development language and/or framework (e.g., C#,.NET, Java, etc.)
• Familiarity with DevOps tools such as Azure Repos, Github, Azure Pipelines, Github actions, etc.
• Demonstrated experience working with diverse stakeholders, preferably on a global multi-national basis
• Demonstrated ability to manage concurrent initiatives and use effective judgment in prioritization and timemanagement
• Effective written and verbal communication abilities across technical and non-technical stakeholders

Requisition ID: 116822

In Malaysia, the services are provided by Deloitte and other related entities in Malaysia ("Deloitte in Malaysia"), which are affiliates of Deloitte Southeast Asia Ltd. Deloitte Southeast Asia Ltd is a member firm of Deloitte Touche Tohmatsu Limited. Deloitte in Malaysia, which is within the Deloitte Network, is the entity that is providing this Website.