Offensive Security Analyst (Penetration Testers)

Sekuro Asia - An Insight Company; Kuala Lumpur; On-site; MYR 60,000 - 90,000; Full time

Job summary

Sekuro Asia is seeking an experienced cybersecurity professional to join our team in an engagement-driven role. You will lead and contribute to penetration testing projects, coordinate with clients and experts, and guide junior staff in developing security capabilities across diverse environments.

We value executive experience, strong English communication, and a proactive approach to securing client ecosystems through hands-on testing and strategic security designs.

Qualifications

• 2–3 years of client-facing consulting experience.
• Must have: OSCP or CREST CRT.
• Some Executive Experience.
• Must be able to speak English for our English speaking clients.

Responsibilities

• Acting as an Engagement Manager or Engagement Lead on projects, as an individual contributor.
• Conducting security assessments for various technology types and environments, with a focus on penetration testing.
• Guiding junior talent to become cybersecurity experts as well.
• Doing project management and developing security test plans around larger complex projects.
• Coordinate with clients and other subject matter experts in different fields, as required in projects.
• Drive and develop capabilities in specific security areas, (E.g. Secure system architecture design in the cloud).

Skills

Penetration testing

Client facing

Security assessments

Mentoring junior staff

Education

OSCP or CREST CRT

Job description

Our Red Team, Offensive Security Analysts and Consultants work with organisations and technical teams to perform a variety of assessments and provide practical advice to keep them secure. Red team members are generally familiar with and apply themselves to most aspects of cybersecurity but specialize in web application security, code reviews, architecture design, network security, attack simulations or even specialist fields such as mainframe or SCADA systems. They help to ensure cybersecurity issues and identified along with their associated risks, and guide organisations to manage this risk in a practical manner.

You will be:

• Acting as an Engagement Manager or Engagement Lead on projects, as an individual contributor;
• Conducting security assessments for various technology types and environments, with a focus on penetration testing;
• Guiding junior talent to become cybersecurity experts as well;
• Doing project management and developing security test plans around larger complex projects;
• Coordinate with clients and other subject matter experts in different fields, as required in projects; and
• Drive and develop capabilities in specific security areas, (E.g. Secure system architecture design in the cloud).

A suitable candidate would have some or most of the following attributes:

• Demonstrate deep understanding of penetration-testing methodologies, techniques, and remediation of security risks;
• Be able to identify vulnerabilities in web apps/web APIs, and pick up issues in code through manual source code reviews/static code analysis;
• Understand threats in different environments, from cloud, to endpoints or IoT systems. Perform review of hardening controls for such systems; and
• Think on your feet and adapt to new threats and technologies are they develop.

Experience and Certification

• 2 - 3 years of client facing consulting experience.
• Must have: OSCP or CREST CRT
• Some Executive Experience
• Must be able to speak English for our English speaking clients

The Mission:

Protect and enable growth of value creators, through excellence and integrity.

To be the first choice for visionary organisations and talents, and to turn every client into a client for life.

We are passionate about providing opportunities to our team members to be the best version of themselves and building partnerships with our clients to ensure cybersecurity empowers them towards their business goals.

The Team:

Our team is made up of Information Security professionals coming from all types of professional and personal backgrounds - we have a unique, international environment and believe in having fun at work. We offer benefits to help you in your career progression and in addition, we have training and certification opportunities, flexible hours, a great workplace environment, a culture focused on helping you become a balanced consultant while working in a technically strong, diverse team.

About Sekuro Asia

Sekuro Asia is an independent cybersecurity consulting firm and we have been operating for more than 10 years. We have offices located in more than 10 different cities across the globe with a growing presence in Asia.

We offer Cybersecurity services ranging from Offensive Security to Strategy, Governance, Risk and Compliance services, including ISO27001 implementation and adoption of other International Standards for our clients. We are ISO27001 certified, CREST Accredited and a PCI QSA company. We are a registered Services supplier for both the Singapore Government as well as the Australian Government.