Penetration Tester & Offensive Security Specialist

HAVI; Kuala Lumpur; Hybrid; MYR 180,000 - 240,000; Full time

Benefits offered by this job

Competitive salary

Hybrid schedule (3 days in office, 2 W

Training & development

Diversity and inclusion

Job summary

HAVI TechHUB in Kuala Lumpur is seeking a hands-on Penetration Tester & Offensive Security Specialist to join our team. You will proactively identify vulnerabilities and validate defenses across our global technology landscape, focusing on web applications, cloud infrastructure, and datacenter-level tests.

The role emphasizes OT hardware security, automated systems, and practical ingenuity over tenure, with a strong emphasis on translating findings into actionable fixes for developers and

Qualifications

• Hands-on experience in offensive security, ethical hacking, or vulnerability research.
• Testing enterprise web apps, APIs, and hybrid-cloud environments (Azure, AWS, OCI).
• Solid understanding of network exploitation, lateral movement, and common infra vulnerabilities.
• Proficient with offensive toolsets and scripting for exploit verification (Python, Bash, Go).
• Interest or experience in OT, hardware hacking, or automated systems.

Responsibilities

• Perform penetration testing across web applications, APIs, and hybrid-cloud environments.
• Identify vulnerabilities and validate defenses across global tech landscape.
• Translate exploit proofs‑of‑concept into prioritized remediation steps for developers and engineers.

Skills

Offensive security

Penetration testing

Cloud security

Networking exploitation

Scripting (Python Bash Go)

OT/hardware security

Tools

Burp Suite

Metasploit

Nmap

Kali Linux

Job description

At HAVI, since 1974, we haven't just been in the business of supply chain; we’ve been in the business of reimagining connections between people and the products they love to create a better future.

Joining the TechHUB is an opportunity to be part of the transformation journey towards reimagining the future of Supply Chain Technology!

At HAVI TechHUB, You Get…

THE WORK

…the chance to embark on a groundbreaking startup journey set to transform global supply chain results. Here, you’ll have the opportunity to make your mark by innovating, creating and driving revolutionary projects that reshape the tech and supply chain world. As you steer the change needed for the company’s growth, your work will be purposeful, driving value and bringing smiles to everyday life.

THE PEOPLE

…to work with a diverse mix of talent – an exceptional team of experts, trailblazers and problem solvers from around the globe. Together, you’ll seamlessly work across borders to achieve what you seem impossible.

THE ENVIRONMENT

…to thrive in a supportive yet challenging environment where innovation to redefine what’s possible is our commitment. Experience a culture that encourages autonomy, flexibility and empowerment, and embrace a collaborative mindset that prioritizes teamwork and experimentation – essential for shaping the future of Supply Chain Technology!

About The Role

We are looking for a Penetration Tester & Offensive Security Specialist to join our TechHUB in Kuala Lumpur!

The person we are looking for must be hands‑on to proactively identify vulnerabilities and validate defenses across our global technology landscape. This role focuses on executing traditional web applications, cloud infrastructure, and datacenter‑level penetration tests. Crucially, we are looking for a candidate who also possesses technical prowess or a strong interest in Operational Technology (OT), hardware hacking, or automated systems. The ideal candidate prioritizes technical ingenuity over years of corporate tenure, providing the offensive insight needed to secure our core digital applications while helping safely test the resilience of our automated physical logistics environments.

The Skills

• Proven technical prowess and practical experience in offensive security, ethical hacking, or vulnerability research.
• Strong hands‑on experience performing penetration testing across enterprise web applications, APIs, and hybrid‑cloud environments (Azure, AWS, or OCI).
• Solid understanding of internal and external network exploitation methodologies, lateral movement, and common infrastructure vulnerabilities.
• Proficient in using industry‑standard offensive toolsets (e.g., Burp Suite, Metasploit, Nmap, Kali Linux) alongside the ability to write custom scripts (e.g., Python, Bash, Go) for exploit verification.
• Deep curiosity and a strong technical grasp of physical attack surfaces or industrial constraints.
• Full English fluency both spoken and written. Excellent technical documentation skills with the ability to clearly translate exploit proofs‑of‑concept into prioritized, actionable remediation steps for developers and systems engineers.
• Strong Pluses: Direct experience with hardware debugging interfaces (e.g., UART, JTAG), firmware extraction, or testing industrial/OT networks; relevant hands‑on certifications (e.g., OSCP, OSWE, EWPTX, or equivalent practical achievements).

The Benefits

• The People! The Work! The Environment!
• Competitive Salary: we offer a salary that reflects your experience, and expertise
• Work‑Life Balance: Hybrid Working — 3 days in office, 2 days from home
• Professional Growth: access to ongoing training.
• Inclusive Environment: we prioritize diversity and inclusion, ensuring everyone feels welcome and valued.

In return, HAVI TechHUB asks…

BE ADAPTABLE

…and swifty adjust to new challenges, diverse mindsets and disruptive approaches as you navigate the ever‑evolving supply chain technology landscape.

BE A SOLUTION SEEKER

…and embrace challenges creatively, think critically and drive positive change in supply chain technology.

BE DRIVEN

…and demonstrate initiative and accountability in pursuing innovative solutions and strategies to shape the future of supply chain technology.

Apply Now! Step into the future with us at HAVI TechHUB in Kuala Lumpur and make your mark!

Equal Opportunity Employer: HAVI TechHUB is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regards to race, color, religion, sex, sexual orientation, gender identity, gender expression, national origin, disability, age, parenthood, pregnancy or any other basis protected by applicable law, and will not be discriminated against.