On-Site VAPT Programme Lead

LAVU TECH SOLUTIONS SDN. BHD.; Kuala Lumpur; On-site; MYR 180,000 - 240,000; Full time

Job summary

LAVU TECH SOLUTIONS SDN. BHD. is seeking a Senior Resident Engineer to provide on-site programme management for enterprise-wide VAPT engagements.

You will coordinate between TNB system owners, internal security teams and VAPT service providers, ensuring engagements are planned, executed, reported and closed consistently. You will lead the development of the annual VAPT plan, review test results, and drive remediation with system owners.

Qualifications

• Bachelor’s degree in CS, IT, engineering or cyber security.
• 8+ years in ICT with at least 5 years in cyber security.
• 3+ years hands-on VAPT delivery as tester, team lead or reviewer.
• 3+ years managing security assessment projects and third-party providers.
• Proven ability to manage multiple concurrent security testing engagements.
• Knowledge of VAPT methodologies and standards: OWASP Top 10, PTES, NIST SP 800-115, CVSS, MITRE ATT&CK.
• Knowledge of ISO/IEC 27001, NIST CSF, Malaysia Cyber Security Act 2024 and PDPA 2010.
• Proficient in Bahasa Malaysia and English; reporting to management.

Responsibilities

• Develop and maintain the annual VAPT plan and testing calendar across IT, cloud, app and network assets.
• Receive, scope and prioritise VAPT requests; prepare rules of engagement and approvals.
• Verify pre-test readiness, test accounts, rollback plans and safe-testing controls.
• Coordinate day-to-day execution of multiple engagements across providers.
• Perform QA review of VAPT reports for technical accuracy and risk consistency.
• Maintain central findings register and drive remediation with system owners.
• Coordinate retesting and closure of remediated findings; manage risk acceptance process.
• Produce monthly programme reports and quarterly dashboards with KPIs and trends.
• Support audits by providing VAPT evidence and status; manage providers' deliverables.

Skills

VAPT delivery

Project management

Stakeholder management

Risk assessment

Reporting & governance

Auditing

Education

Bachelor's degree in Computer Science/IT/Cyber Security

Job description

LAVU TECH SOLUTIONS SDN. BHD. is seeking a Senior Resident Engineer to provide on-site programme management for enterprise-wide VAPT engagements.

You will coordinate between TNB system owners, internal security teams and VAPT service providers, ensuring engagements are planned, executed, reported and closed consistently. You will lead the development of the annual VAPT plan, review test results, and drive remediation with system owners.