Penetration Testing Analyst: Web, API, Mobile & Network

Businesslist; Kuala Lumpur; On-site; MYR 54,000 - 66,000; Full time

Benefits offered by this job

Comprehensive medical

Other benefits

Job summary

Businesslist in Kuala Lumpur is seeking a Penetration Testing Analyst to join the security team, performing hands-on testing across web, API, network, and mobile applications.

You will analyze architectures, deliver detailed findings with remediation recommendations, and collaborate with global teams on multiple engagements. The role requires 1–2 years of experience and familiarity with Burp Suite, Kali Linux, OWASP Top 10, and security reporting.

Qualifications

• 1–2 years of hands-on Penetration Testing experience.
• Strong in Web Application Penetration Testing.
• Experience with API security testing using Burp Suite, Postman, Swagger, and OWASP ZAP.
• Experience in Internal and External Network Penetration Testing.
• Mobile testing experience (iOS and Android).
• Understanding of common vulnerabilities and remediation approaches.
• Hands-on with Kali Linux and offensive security tools.
• Familiarity with OWASP Top 10 and secure coding principles.
• Scripting/automation with Python, Bash, or PowerShell.
• Ability to present findings clearly to technical and non-technical stakeholders.

Responsibilities

• Conduct Web Application, API, Network, Mobile, Thick Client, and AI Security Penetration Testing.
• Perform manual and tool-based security assessments across environments.
• Assist with scoping and planning of engagements.
• Analyze complex systems to identify security weaknesses.
• Deliver detailed findings and remediation recommendations.
• Support QA reviews of reports and deliverables.
• Collaborate with global teams and clients on concurrent projects.
• Enhance testing methodologies, standards, and processes.
• Conduct security research and stay updated on threats.
• Mentor team members and share knowledge.

Skills

Penetration testing

Web application security

API security testing

Network security testing

Mobile security testing

Kali Linux

Burp Suite

Metasploit

Nmap

Security reporting

Tools

Burp Suite

Postman

Swagger

OWASP ZAP

Kali Linux

Metasploit

Nmap

Qualys

SQLMap

Job description

Businesslist in Kuala Lumpur is seeking a Penetration Testing Analyst to join the security team, performing hands-on testing across web, API, network, and mobile applications.

You will analyze architectures, deliver detailed findings with remediation recommendations, and collaborate with global teams on multiple engagements. The role requires 1–2 years of experience and familiarity with Burp Suite, Kali Linux, OWASP Top 10, and security reporting.