Penetration Tester (Security)

VeecoTech Web & Ecommerce Sdn Bhd; Bayan Lepas; On-site; MYR 80,000 - 120,000; Full time

Job summary

VeecoTech Web & Ecommerce Sdn Bhd is seeking an experienced security assessor to conduct penetration testing, code and configuration reviews, and risk analysis for client assets including web and mobile applications and network infrastructure.

The role emphasizes delivering actionable recommendations, clear reporting, and strong client service, with occasional on-site assessments and travel as needed.

Qualifications

• Diploma or bachelor’s degree in computer science, computer engineering, or a related field is beneficial.
• Industry-recognized technical certifications, such as Offensive Security or CREST certifications (e.g. OSCP, CREST CRT) is preferred.
• Expertise in software and network security.
• Proficiency in finding and identifying vulnerabilities in web applications.
• Experience with penetration testing without relying on automated tools.
• Basic programming skills to support the development of proof-of-concepts.
• Creativity, independence, and strong problem-solving skills.
• Excellent verbal and written communication skills, including the ability to prepare clear and concise documentation and presentations of information for technical and non-technical audiences.
• 2 or more years of experience in Penetration Testing is preferred.

Responsibilities

• Conducting various security assessments, including penetration testing, source code review, and security configuration review.
• Assessing the security of assets such as web and mobile applications, network infrastructure, and Internet of Things devices.
• Managing work to ensure high-quality and timely completion.
• Analyzing threats and vulnerabilities to determine impacts and risks for clients.
• Providing professional recommendations and action plans to clients.
• Delivering excellent client service and being responsible for the delivery of that service.
• Communicating security findings clearly and effectively to internal and external stakeholders through both written and verbal means.
• Requires travel to perform on-site security assessments when needed.

Skills

Penetration testing

Web app security

Vulnerability discovery

Programming basics

Communication skills

Independent work

Education

CS/CE degree

Offensive Security / CREST certs

Job description

Responsibilities

• Conducting various security assessments, including penetration testing, source code review, and security configuration review.
• Assessing the security of assets such as web and mobile applications, network infrastructure, and Internet of

Things devices.

• Managing work to ensure high-quality and timely completion.
• Analyzing threats and vulnerabilities to determine impacts and risks for clients.
• Providing professional recommendations and action plans to clients.
• Delivering excellent client service and being responsible for the delivery of that service.
• Communicating security findings clearly and effectively to internal and external stakeholders through both written and verbal means.
• Requires travel to perform on-site security assessments when needed.

Responsibilities

• Conducting various security assessments, including penetration testing, source code review, and security configuration review.
• Assessing the security of assets such as web and mobile applications, network infrastructure, and Internet of

Things devices.

• Managing work to ensure high-quality and timely completion.
• Analyzing threats and vulnerabilities to determine impacts and risks for clients.
• Providing professional recommendations and action plans to clients.
• Delivering excellent client service and being responsible for the delivery of that service.
• Communicating security findings clearly and effectively to internal and external stakeholders through both written and verbal means.
• Requires travel to perform on-site security assessments when needed.

Requirements

• A diploma or bachelor’s degree in computer science, computer engineering, or a related field is beneficial.
• Industry-recognized technical certifications, such as Offensive Security or CREST certifications (e.g. OSCP, CREST CRT) is preferred.
• Expertise in software and network security.
• Proficiency in finding and identifying vulnerabilities in web applications.
• Experience with penetration testing without relying on automated tools.
• Basic programming skills to support the development of proof-of-concepts.
• Creativity, independence, and strong problem-solving skills.
• Excellent verbal and written communication skills, including the ability to prepare clear and concise documentation and presentations of information for technical and non-technical audiences.
• 2 or more years of experience in Penetration Testing is preferred.