Offensive Security Specialist: Pen Tests & Security Posture

Hexamatics Servvcom Sdn Bhd; Kuala Lumpur; On-site; MYR 90,000 - 150,000; Full time

Job summary

Hexamatics Servvcom Sdn Bhd is seeking an offensive security professional to assess security effectiveness through rigorous testing of infrastructure, apps, cloud, and networks. You will document findings and work with teams to validate remediations before deployment.

Responsibilities include web, network, and API security testing, exploitation path assessment, and continuous threat research to strengthen the organization’s security posture.

Qualifications

• Experience in vulnerability assessments and penetration testing.
• Familiarity with CrowdStrike Falcon and Burp Suite is a plus.

Responsibilities

• Plan and execute vulnerability assessments and penetration tests against infrastructure, applications, cloud environments, and networks.
• Conduct web application, network, and API security testing.
• Identify, validate, and assess security vulnerabilities and exploitation paths.
• Perform configuration and security posture assessments of servers, operating systems, databases, and network devices.
• Document findings, risk ratings, and remediation recommendations in technical assessment reports.
• Support secure application deployment activities and validate security controls before production release.
• Work closely with blue teams and system owners to validate remediation effectiveness.
• Continuously research emerging threats, attack techniques, and offensive security tools.

Skills

Security testing

CrowdStrike Falcon

Tools

Burp Suite

Job description

Hexamatics Servvcom Sdn Bhd is seeking an offensive security professional to assess security effectiveness through rigorous testing of infrastructure, apps, cloud, and networks. You will document findings and work with teams to validate remediations before deployment.

Responsibilities include web, network, and API security testing, exploitation path assessment, and continuous threat research to strengthen the organization’s security posture.