Junior Penetration Tester: Hands-On Security & Assessments

TG Malaysia; Iskandar Puteri; On-site; MYR 42,000 - 66,000; Full time

Job summary

Responsibilities include performing vulnerability assessments, conducting testing with Burp Suite/Nessus/Nmap, preparing reports, and collaborating with security teams to strengthen controls. Ideal for candidates with foundational security knowledge and a drive to learn offensive security.

Qualifications

• Basic understanding of networking concepts (TCP/IP, DNS, HTTP/HTTPS, and common protocols).
• Familiarity with Windows and Linux operating systems.
• Knowledge of common web vulnerabilities including OWASP Top 10.
• Understanding of vulnerability assessment and penetration testing methodologies.
• Exposure to security tools such as Burp Suite, Nmap, Nessus, Wireshark, or Metasploit.
• Basic scripting or programming skills in Python, PowerShell, Bash, JavaScript, or similar languages.
• Strong analytical, troubleshooting, and problem-solving skills.
• Good written and verbal communication skills.
• Ability to work independently and collaboratively.

Responsibilities

• Perform vulnerability assessments and penetration testing on web applications, APIs, networks, and systems.
• Identify, analyze, and validate security vulnerabilities and misconfigurations.
• Conduct security testing using industry-standard tools and methodologies.
• Prepare clear and concise technical reports documenting findings and remediation recommendations.
• Verify remediation efforts through re-testing and validation activities.
• Collaborate with infrastructure, application, and security teams to strengthen security controls.
• Stay updated on emerging cybersecurity threats, vulnerabilities, and penetration testing techniques.

Skills

Networking basics

Windows

Linux

OWASP Top 10

Vulnerability assessment

Penetration testing

Burp Suite

Nmap

Nessus

Wireshark

Metasploit

Python

PowerShell

Bash

JavaScript

Communication skills

Analytical thinking

Team collaboration

Tools

Burp Suite

Nmap

Nessus

Wireshark

Metasploit

Job description

Responsibilities include performing vulnerability assessments, conducting testing with Burp Suite/Nessus/Nmap, preparing reports, and collaborating with security teams to strengthen controls. Ideal for candidates with foundational security knowledge and a drive to learn offensive security.