Penetration Testing (Analyst)

AimBig Employment Pty Ltd; Kuala Lumpur; On-site; MYR 54,000 - 66,000; Full time

Benefits offered by this job

Comprehensive medical benefits

Permanent Kuala Lumpur-based position

Job summary

AimBig Employment Pty Ltd in Kuala Lumpur is seeking a security Penetration Tester with 1-2 years of hands-on experience to perform comprehensive assessments across web, API, network, and mobile environments.

You will use Burp Suite, Nmap, Metasploit, Kali Linux and collaborate with global teams on engagements, delivering clear findings and remediation recommendations.

Qualifications

• 1–2 years hands-on penetration testing experience.
• Strong Web Application Penetration Testing experience.
• Experience with API security testing using Burp Suite, Postman, Swagger, OWASP ZAP.
• Experience in internal and external network testing.
• Mobile app testing experience (iOS and Android).

Responsibilities

• Conduct web, API, network, mobile, thick client, and AI security testing.
• Perform manual and tool-based security assessments across diverse environments.
• Assist with scoping and planning of penetration testing engagements.
• Analyze complex systems and architecture designs to identify security weaknesses.
• Deliver detailed security findings and remediation recommendations to stakeholders.
• Support quality assurance reviews of penetration testing reports and deliverables.
• Collaborate with global teams and clients across multiple concurrent projects.
• Continuously enhance penetration testing methodologies, standards, and processes.
• Conduct security research and stay updated on emerging cyber threats and attack techniques.
• Mentor team members and contribute to technical knowledge sharing initiatives.

Skills

Penetration Testing

Web Application Testing

API Security Testing

Network Penetration Testing

Mobile Application Testing

Kali Linux

Scripting (Python/Bash/PowerShell)

Communication skills

Tools

Burp Suite

Nmap

Metasploit

OWASP ZAP

Qualys

SQLMap

Postman

Swagger

Job description

• Conduct Web Application, API, Network, and Mobile Penetration Testing
• Work with tools such as Burp Suite, Nmap, Metasploit, and Kali Linux

About Our Client

An organisation within the professional services industry, located in Kuala Lumpur.

Job Description

• Conduct Web Application, API, Network, Mobile, Thick Client, and AI Security Penetration Testing
• Perform manual and tool-based security assessments across diverse environments
• Assist with technical scoping and planning of penetration testing engagements
• Analyze complex systems and architecture designs to identify security weaknesses
• Deliver detailed security findings and remediation recommendations to stakeholders
• Support quality assurance reviews of penetration testing reports and deliverables
• Collaborate with global teams and clients across multiple concurrent projects
• Continuously enhance penetration testing methodologies, standards, and processes
• Conduct security research and stay updated on emerging cyber threats and attack techniques
• Mentor team members and contribute to technical knowledge sharing initiatives

The Successful Applicant

• 1-2 years of hands-on Penetration Testing experience
• Strong experience in Web Application Penetration Testing
• Experience performing API Security Testing using tools such as Burp Suite, Postman, Swagger, and OWASP ZAP
• Experience conducting Internal and External Network Penetration Testing
• Mobile Application Penetration Testing experience (iOS and Android)
• Strong understanding of common vulnerabilities, attack vectors, and remediation approaches
• Hands-on experience with Kali Linux and offensive security toolsets
• Experience using tools such as Burp Suite, Metasploit, Nmap, Qualys, SQLMap, and similar platforms
• Knowledge of OWASP Top 10 security risks and secure coding principles
• Familiarity with scripting and automation using languages such as Python, Bash, or PowerShell
• Ability to explain technical findings clearly to both technical and non-technical stakeholders
• Experience managing multiple engagements within a fast-paced environment
• Strong written documentation and presentation skills
• Experience working with regional or global stakeholders

What's on Offer

• Annual salary between MYR 54,000 and MYR 66,000.
• Comprehensive medical and other benefits.
• Permanent position based in Kuala Lumpur.