Penetration Tester

Skill Quotient Resources; Kuala Lumpur; On-site; MYR 150,000 - 200,000; Full time

Job summary

A leading cybersecurity firm in Kuala Lumpur is seeking a Penetration Tester to manage penetration testing engagements, communicate with stakeholders, and track remediation of issues. The ideal candidate should have a university degree, proficiency in Mandarin, and 3-4 years of relevant experience in technology or project management. This permanent position offers health insurance benefits.

Benefits

Health insurance

Qualifications

• 3 to 4 years of experience in technology/project management, preferably in information security.
• Experience managing penetration testing engagements.
• Familiarity with vulnerability assessment and project management.

Responsibilities

• Plan and communicate penetration testing timeline.
• Facilitate meetings for discussion and clarification.
• Track penetration testing issues and compile status.

Skills

Project management skills

Proficiency in Mandarin

Vulnerability assessment

Communication with stakeholders

Education

University degree in Information Systems, Computer Science, or related disciplines

Information security or project management certifications (such as CISA or PMP)

Job description

Responsibilities

• Plan and communicate the penetration testing timeline with internal stakeholders and external vendors at the beginning of calendar year.
• Ensure penetration testing schedule is executed as per the plan for each in-scope applications.
• Facilitate meetings between application development teams and external vendors for discussion and clarification, including handling conflicting schedules and priorities.
• Penetration testing tracking and issues remediation: Tracking of penetration testing issues and compiling the status on a weekly basis.
• Ensure issues are remediated timely according to the timeline stipulated in vulnerability management standard.
• Proactively perform outstanding issues escalation based on the severity of the findings using the defined issues escalation processes.
• Penetration testing basic issues analysis: Perform basic review of penetration issues findings to identify potential common problems, based on web and mobile application security guideline/checklist of OWASP Top 10.
• Conduct basic security risk assessment based on identified issues during penetration testing to identify areas of improvement and potential mitigations.
• Provide basic advice to application teams for general vulnerability remediation. Arrange meetings or discussions with related security SMEs for deeper issues analysis from the penetration testing engagement.

Requirements

• University degree preferably in Information Systems, Computer Science, Information Security, or related disciplines.
• Preferably holder of one or more information security or project management certifications, such as CISA or PMP.
• Proficiency in Mandarin language to support Mandarin-speaking stakeholders.
• Minimum 3 to 4 years of experience in Technology / project management, preferably in the information security domain, with experience in managing penetration testing engagements.
• Strong project management skills and the ability to coordinate with multiple stakeholders and manage conflicting priorities.
• Experience in coordinating and scheduling penetration tests with external vendors.
• Familiarity with vulnerability assessment, penetration testing, and project management with the ability to identify and assess various types of vulnerabilities, and proactiveness to engage related SMEs for deeper analysis.
• Job Type: Permanent
• Schedule: Monday to Friday
• Experience: Penetration Tester: 3 years (Preferred)

Benefits

• Health insurance