Penetration Tester (Senior)

FIRMUS; Kuala Lumpur; On-site; MYR 60,000 - 120,000; Full time

Job summary

FIRMUS in Malaysia is seeking a Security Consultant to support pre- and post-sales activities for security assessment projects such as penetration testing, host assessments, web application security, and more. You will assist consultants with advisory, technical tasks and project management.

The ideal candidate has a Bachelor’s degree in CS/IT, hands-on testing experience, OSCP or similar certs are advantageous, and strong communication and networking knowledge.

Qualifications

• Bachelor’s degree in Computer Science, Information Technology or related fields.
• Experience in manual and automated security testing and assessment.
• Certifications such as OSCP, OSCE, CPSA, CRT, GWAPT, GPEN, GMOB, Red Team are advantageous.
• Good project management and leadership skills.
• Familiar with Penetration Testing Methodologies (OSSTMM, OWASP, NIST, PTES).
• Proficiency in Java, Python, Perl (programming background advantageous).
• Strong networking knowledge.
• Excellent communication and interpersonal skills.

Responsibilities

• Support pre- and post-sales security assessment activities, including presentations and demos.
• Assist security consultants with advisory, technical tasks and project management.
• Ensure timely delivery of all committed project deliverables.

Skills

Java

Python

Perl

Communication

Networking

Education

Bachelor’s degree in Computer Science/Information Technology

Tools

OSCP

OSCE

Job description

• To support all Pre & Post Sales activities for security assessment projects such as; Penetration Testing, Host Assessments, Web Application Security, Wireless Security Assessment, Social Engineering, Source Code Reviews, Mobile Application Penetration Testing, Red Team Exercise etc. Such activities may include; presentations, proposal preparation, actual hands-on work, demos, etc.
• To assist team member (Security Consultants & Associate Consultants) in terms of advisory, technicalities and project management.
• To ensure that all committed project deliverables are met in a timely manner.

Qualification:

• Bachelor’s degree (or higher) in Computer Science, Information Technology or related fields.
• Good knowledge and experience in performing both manual and automated based security testing and assessment are required (any past experience in publishing of new security exploits are advantageous).
• Professional IT security certifications such as OSCP, OSCE, CPSA, CRT, GWAPT, GPEN, GMOB, Red Team etc. are advantageous.
• Good project management and leadership skills are required.
• Familiar with Penetration Testing Methodologies such as OSSTMM, OWASP, NIST, PTES and etc.
• Has proficiency in Programming Language such as Java, Python, Perl etc. (Any Relevant Programming Background would be advantageous)
• Good understanding on Networking knowledge
• Good communication and interpersonal skills are required.