Lead Penetration Tester — Red Team & App Security

FIRMUS; Kuala Lumpur; On-site; MYR 120,000 - 180,000; Full time

Job summary

FIRMUS in Kuala Lumpur is seeking a Penetration Testing Lead to design, scope, and execute advanced offensive security engagements across networks, web, mobile, and cloud environments. You will supervise and mentor junior consultants, deliver comprehensive reports, and provide strategic security recommendations to clients.

The role requires 5+ years of hands-on experience, expertise in MITRE ATT&CK, and proven leadership in Red Team exercises.

Qualifications

• 5+ years of hands-on penetration testing across networks, web, and mobile.
• Experience leading Red Team engagements and delivering reports to executives.
• Strong knowledge of MITRE ATT&CK and vulnerability analysis.

Responsibilities

• Design, scope, and lead security assessments across networks, apps, and cloud.
• Perform offensive security exercises including Red Team engagements.
• Document findings with prioritized, actionable remediation recommendations.
• Collaborate with clients to align testing with business risk.
• Review reports for accuracy and clarity as a QA reviewer.
• Mentor junior consultants and train on testing methodologies.

Skills

Penetration testing

Web security

Mobile security

Red Team leadership

Education

OSCP certification

CREST CRT

Job description

FIRMUS in Kuala Lumpur is seeking a Penetration Testing Lead to design, scope, and execute advanced offensive security engagements across networks, web, mobile, and cloud environments. You will supervise and mentor junior consultants, deliver comprehensive reports, and provide strategic security recommendations to clients.

The role requires 5+ years of hands-on experience, expertise in MITRE ATT&CK, and proven leadership in Red Team exercises.