Penetration Testing Analyst

Businesslist; Kuala Lumpur; On-site; MYR 54,000 - 66,000; Full time

Benefits offered by this job

Comprehensive medical

Other benefits

Job summary

Businesslist in Kuala Lumpur is seeking a Penetration Testing Analyst to join the security team, performing hands-on testing across web, API, network, and mobile applications.

You will analyze architectures, deliver detailed findings with remediation recommendations, and collaborate with global teams on multiple engagements. The role requires 1–2 years of experience and familiarity with Burp Suite, Kali Linux, OWASP Top 10, and security reporting.

Qualifications

• 1–2 years of hands-on Penetration Testing experience.
• Strong in Web Application Penetration Testing.
• Experience with API security testing using Burp Suite, Postman, Swagger, and OWASP ZAP.
• Experience in Internal and External Network Penetration Testing.
• Mobile testing experience (iOS and Android).
• Understanding of common vulnerabilities and remediation approaches.
• Hands-on with Kali Linux and offensive security tools.
• Familiarity with OWASP Top 10 and secure coding principles.
• Scripting/automation with Python, Bash, or PowerShell.
• Ability to present findings clearly to technical and non-technical stakeholders.

Responsibilities

• Conduct Web Application, API, Network, Mobile, Thick Client, and AI Security Penetration Testing.
• Perform manual and tool-based security assessments across environments.
• Assist with scoping and planning of engagements.
• Analyze complex systems to identify security weaknesses.
• Deliver detailed findings and remediation recommendations.
• Support QA reviews of reports and deliverables.
• Collaborate with global teams and clients on concurrent projects.
• Enhance testing methodologies, standards, and processes.
• Conduct security research and stay updated on threats.
• Mentor team members and share knowledge.

Skills

Penetration testing

Web application security

API security testing

Network security testing

Mobile security testing

Kali Linux

Burp Suite

Metasploit

Nmap

Security reporting

Tools

Burp Suite

Postman

Swagger

OWASP ZAP

Kali Linux

Metasploit

Nmap

Qualys

SQLMap

Job description

• * Conduct Web Application, API, Network, Mobile, Thick Client, and AI Security Penetration Testing
• * Perform manual and tool-based security assessments across diverse environments
• * Assist with technical scoping and planning of penetration testing engagements
• * Analyze complex systems and architecture designs to identify security weaknesses
• * Deliver detailed security findings and remediation recommendations to stakeholders
• * Support quality assurance reviews of penetration testing reports and deliverables
• * Collaborate with global teams and clients across multiple concurrent projects
• * Continuously enhance penetration testing methodologies, standards, and processes
• * Conduct security research and stay updated on emerging cyber threats and attack techniques
• * Mentor team members and contribute to technical knowledge sharing initiatives

The Successful Applicant

A successful Penetration Testing Analyst should have:

• * 1-2 years of hands-on Penetration Testing experience
• * Strong experience in Web Application Penetration Testing
• * Experience performing API Security Testing using tools such as Burp Suite, Postman, Swagger, and OWASP ZAP
• * Experience conducting Internal and External Network Penetration Testing
• * Mobile Application Penetration Testing experience (iOS and Android)
• * Strong understanding of common vulnerabilities, attack vectors, and remediation approaches
• * Hands-on experience with Kali Linux and offensive security toolsets
• * Experience using tools such as Burp Suite, Metasploit, Nmap, Qualys, SQLMap, and similar platforms
• * Knowledge of OWASP Top 10 security risks and secure coding principles
• * Familiarity with scripting and automation using languages such as Python, Bash, or PowerShell
• * Ability to explain technical findings clearly to both technical and non-technical stakeholders
• * Experience managing multiple engagements within a fast-paced environment
• * Strong written documentation and presentation skills
• * Experience working with regional or global stakeholders

What's on Offer

• Annual salary between MYR 54,000 and MYR 66,000.
• Comprehensive medical and other benefits.
• Permanent position based in Kuala Lumpur.