Penetration Tester

Baker Tilly MH Consulting Sdn Bhd; Petaling Jaya; On-site; MYR 90,000 - 150,000; Full time

Job summary

Baker Tilly MH Consulting Sdn Bhd in Malaysia is seeking a Cybersecurity Penetration Tester to perform security assessments, identify vulnerabilities, and deliver remediation guidance for a variety of clients.

The role involves planning and executing tests on web, mobile, and infrastructure systems, documenting findings, and presenting results in clear terms to business stakeholders. This is a full-time on-site position in Kuala Lumpur.

Qualifications

• CEH, OSCP, CPTE and RCCE certifications are mandatory.
• Strong analytical and problem-solving abilities.
• Ability to work in a consulting environment with multiple engagements.

Responsibilities

• Plan and execute penetration tests on web, mobile, and infrastructure systems.
• Document findings and develop remediation recommendations.
• Prepare detailed technical reports and present results to business audiences.
• Collaborate with cybersecurity and advisory teams to strengthen client security posture.

Skills

Penetration testing

Threat analysis

Report writing

Client communication

Tools

Burp Suite

Metasploit

Nessus

Kali Linux

Job description

Company Description

Baker Tilly MH Consulting Sdn Bhd is part of Baker Tilly Malaysia and an independent member of Baker Tilly International, a global network of accounting and business advisory firms operating in 147 territories with 50,400 professionals. The network generates combined worldwide revenue of US$6.8 billion, reflecting its scale and market presence. Baker Tilly is recognized as a leading advisory, tax, and assurance firm that supports clients in navigating complex and changing business environments. Team members benefit from access to international resources, diverse clients, and specialized expertise. For more information, candidates can visit www.bakertilly.my

Role Description

This is a full-time, on-site Cybersecurity Penetration Tester role based in the Federal Territory of Kuala Lumpur, Malaysia. The role involves planning and executing penetration tests on web, mobile, and infrastructure systems to identify vulnerabilities and assess security controls. The Penetration Tester will perform security assessments, document findings, and develop clear remediation recommendations for clients and internal stakeholders. Day-to-day tasks include conducting red team exercises, researching emerging threats, performing malware and exploit analysis, and validating the effectiveness of security measures. The role also requires preparing detailed technical reports, presenting results in a non-technical manner to business audiences, and collaborating with other cybersecurity and advisory team members to strengthen client security posture.

Mandatory Certification Requirement

• Certified Ethical Hacker (CEH)
• Offensive Security Certified Professional (OSCP)
• Mile2 Certified Penetration Testing Engineer (CPTE)
• Rocheston Certified Cybersecurity Engineer (RCCE)

General

• Strong analytical and problem-solving abilities, attention to detail, and a commitment to ethical security testing practices.
• Ability to work collaboratively in a consulting environment and manage multiple engagements and deadlines.