Ethical Hacker

UpGrowth HR Sdn. Bhd.; Kuala Lumpur; On-site; MYR 60,000 - 110,000; Full time

Job summary

UpGrowth HR Sdn. Bhd. is seeking an ethical hacker/penetration tester to proactively identify and remediate security gaps across applications, infrastructure, and cloud environments.

You will simulate real-world attacks, coordinate with development and IT teams, and help foster a security-first culture. The ideal candidate has 2+ years in penetration testing or ethical hacking, strong knowledge of web, network, API, and cloud security, and hands-on experience with leading security tools.

Qualifications

• Bachelor's Degree in Computer Science, Cybersecurity, Information Technology, or a related field.
• At least 2 years of experience in penetration testing or ethical hacking.
• Strong understanding of web application, network, API, and cloud security.
• Experience with security tools such as Burp Suite, Nmap, Metasploit, OWASP ZAP, Nessus, Wireshark, SQLmap, or Kali Linux.
• Familiarity with Linux, Windows, Python/Bash, TCP/IP, HTTP/HTTPS, and SQL.
• Strong analytical, problem-solving, and communication skills.

Responsibilities

• Conduct penetration testing on web applications, APIs, networks, and cloud environments.
• Perform vulnerability assessments and validate security findings.
• Identify security issues such as SQL Injection, XSS, CSRF, broken authentication, access control flaws, and API vulnerabilities.
• Assess network, server, firewall, VPN, and cloud security configurations.
• Prepare clear security reports with risk ratings and remediation recommendations.
• Collaborate with developers and IT teams to verify security fixes.
• Stay up to date with the latest cybersecurity threats, tools, and best practices.

Skills

Analytical thinking

Problem solving

Communication skills

Education

Bachelor's Degree in Computer Science, Cybersecurity, Information Technology, or related field

Tools

Burp Suite

Nmap

Metasploit

OWASP ZAP

Nessus

Wireshark

SQLmap

Kali Linux

Job description

JOB OVERVIEW:

We are looking for a highly skilled Ethical Hacker / Penetration Tester to proactively identify and eliminate security vulnerabilities across our applications, infrastructure, and cloud environments. You will simulate real-world cyberattacks to assess our security posture, work closely with development and infrastructure teams to remediate vulnerabilities, and help build a strong security-first culture.

JOB RESPONSIBILITIES:

• Conduct penetration testing on web applications, APIs, networks, and cloud environments.
• Perform vulnerability assessments and validate security findings.
• Identify security issues such as SQL Injection, XSS, CSRF, broken authentication, access control flaws, and API vulnerabilities.
• Assess network, server, firewall, VPN, and cloud security configurations.
• Prepare clear security reports with risk ratings and remediation recommendations.
• Collaborate with developers and IT teams to verify security fixes.
• Stay up to date with the latest cybersecurity threats, tools, and best practices.

JOB REQUIREMENTS:

• Bachelor's Degree in Computer Science, Cybersecurity, Information Technology, or a related field.
• At least 2 years of experience in penetration testing or ethical hacking.
• Strong understanding of web application, network, API, and cloud security.
• Experience with security tools such as Burp Suite, Nmap, Metasploit, OWASP ZAP, Nessus, Wireshark, SQLmap, or Kali Linux.
• Familiarity with Linux, Windows, Python/Bash, TCP/IP, HTTP/HTTPS, and SQL.
• Strong analytical, problem-solving, and communication skills.

ADDED SKILLS (PREFERRED):

• Experience in CTF competitions or bug bounty platforms (e.g. HackerOne, Bugcrowd).
• Knowledge of DevSecOps, Docker, Kubernetes, and AI/LLM security.
• Certifications such as OSCP, PNPT, CEH, eJPT, Security+, or PenTest+ are an advantage.