Penetration Tester (Security)

VeecoTech; Bayan Lepas; On-site; MYR 60,000 - 100,000; Full time

Benefits offered by this job

Travel for on-site assessments

On-site security assessments

Job summary

VeecoTech Malaysia is seeking a security-focused professional to conduct penetration testing, source code review, and security configuration reviews, ensuring the protection of web and mobile assets and network infrastructure.

Ideal candidates have 2+ years in penetration testing, relevant certifications (OSCP/CREST CRT), and strong communication skills to present findings to technical and non-technical audiences. Travel for on-site assessments may be required.

Qualifications

• Diploma or bachelor’s degree in computer science, computer engineering, or related field.
• Industry certifications such as OSCP or CREST CRT preferred.
• Expertise in software and network security; ability to identify vulnerabilities without automated tools.

Responsibilities

• Conduct security assessments, including penetration testing and security reviews.
• Assess security of assets such as web/mobile apps, networks, and IoT devices.
• Provide actionable recommendations and risk-based plans to clients.

Skills

Penetration testing

Source code review

Security configuration review

Threat analysis

Client communication

Education

Bachelor's or Diploma in CS/CE

Tools

OSCP

CREST CRT

Job description

Jora Malaysia will close on 9th September 2026. Thank you for being with us, we are cheering you on as you continue your career journey.

• Conducting various security assessments, including penetration testing, source code review, and security configuration review.
• Assessing the security of assets such as web and mobile applications, network infrastructure, and Internet of

Things devices.

• Managing work to ensure high-quality and timely completion.
• Analyzing threats and vulnerabilities to determine impacts and risks for clients.
• Providing professional recommendations and action plans to clients.
• Delivering excellent client service and being responsible for the delivery of that service.
• Communicating security findings clearly and effectively to internal and external stakeholders through both written and verbal means.
• Requires travel to perform on-site security assessments when needed.

Responsibilities

• Conducting various security assessments, including penetration testing, source code review, and security configuration review.
• Assessing the security of assets such as web and mobile applications, network infrastructure, and Internet of

Things devices.

• Managing work to ensure high-quality and timely completion.
• Analyzing threats and vulnerabilities to determine impacts and risks for clients.
• Providing professional recommendations and action plans to clients.
• Delivering excellent client service and being responsible for the delivery of that service.
• Communicating security findings clearly and effectively to internal and external stakeholders through both written and verbal means.
• Requires travel to perform on-site security assessments when needed.

Requirements

• A diploma or bachelor’s degree in computer science, computer engineering, or a related field is beneficial.
• Industry-recognized technical certifications, such as Offensive Security or CREST certifications (e.g. OSCP, CREST CRT) is preferred.
• Expertise in software and network security.
• Proficiency in finding and identifying vulnerabilities in web applications.
• Experience with penetration testing without relying on automated tools.
• Basic programming skills to support the development of proof-of-concepts.
• Creativity, independence, and strong problem-solving skills.
• Excellent verbal and written communication skills, including the ability to prepare clear and concise documentation and presentations of information for technical and non-technical audiences.
• 2 or more years of experience in Penetration Testing is preferred.