Penetration Tester & Offensive Security - OT & Cloud

HAVI; Kuala Lumpur; Hybrid; MYR 180,000 - 240,000; Full time

Benefits offered by this job

Competitive salary

Hybrid schedule (3 days in office, 2 W

Training & development

Diversity and inclusion

Job summary

HAVI TechHUB in Kuala Lumpur is seeking a hands-on Penetration Tester & Offensive Security Specialist to join our team. You will proactively identify vulnerabilities and validate defenses across our global technology landscape, focusing on web applications, cloud infrastructure, and datacenter-level tests.

The role emphasizes OT hardware security, automated systems, and practical ingenuity over tenure, with a strong emphasis on translating findings into actionable fixes for developers and

Qualifications

• Hands-on experience in offensive security, ethical hacking, or vulnerability research.
• Testing enterprise web apps, APIs, and hybrid-cloud environments (Azure, AWS, OCI).
• Solid understanding of network exploitation, lateral movement, and common infra vulnerabilities.
• Proficient with offensive toolsets and scripting for exploit verification (Python, Bash, Go).
• Interest or experience in OT, hardware hacking, or automated systems.

Responsibilities

• Perform penetration testing across web applications, APIs, and hybrid-cloud environments.
• Identify vulnerabilities and validate defenses across global tech landscape.
• Translate exploit proofs‑of‑concept into prioritized remediation steps for developers and engineers.

Skills

Offensive security

Penetration testing

Cloud security

Networking exploitation

Scripting (Python Bash Go)

OT/hardware security

Tools

Burp Suite

Metasploit

Nmap

Kali Linux

Job description

HAVI TechHUB in Kuala Lumpur is seeking a hands-on Penetration Tester & Offensive Security Specialist to join our team. You will proactively identify vulnerabilities and validate defenses across our global technology landscape, focusing on web applications, cloud infrastructure, and datacenter-level tests.

The role emphasizes OT hardware security, automated systems, and practical ingenuity over tenure, with a strong emphasis on translating findings into actionable fixes for developers and