Red Team & AppSec Penetration Tester

iFAST Corp; Kuala Lumpur; Vor Ort; MYR 120.000 - 180.000; Vollzeit

Zusammenfassung

iFAST Corporation is seeking a Cyber Security Engineer specializing in Red Team and Penetration Testing. You will perform security assessments of web, mobile, and API apps, collaborate with developers and DevSecOps to fix findings and improve the CI/CD pipeline.

You should have 2–4 years in security testing, hands-on with Burp Suite, Metasploit and Nmap, and strong OWASP/API security knowledge. OSCP/OSEP is a plus. Kuala Lumpur, Malaysia based role with hybrid possibilities.

Qualifikationen

• Bachelor’s degree in computer science, cybersecurity or related field, or equivalent experience.
• 2 to 4 years of experience in penetration testing, application security or red teaming.
• Hands-on with Burp Suite, Metasploit, Nmap; strong knowledge of OWASP Top 10 and API security.
• Good understanding of Linux, Windows, Active Directory, TCP/IP, cloud and container infrastructure.
• Proficient in Python or Java.
• Certifications such as OSCP, OSEP are a plus.
• Ability to think outside the box and communicate clearly.

Aufgaben

• Perform security assessments of web, mobile and API applications using threat modelling, code scanning and penetration testing.
• Plan and run red team exercises against applications and supporting infrastructure within agreed rules of engagement.
• Provide security consulting to development teams on secure design, architecture reviews and threat modelling.
• Work with developers to remediate findings, remove false positives from scan reports and retest fixes.
• Work with DevOps to build tools and automation that improve security in the CI/CD pipeline.
• Develop secure coding standards and train development teams on web and mobile secure coding.

Kenntnisse

Penetration testing

Application security

Threat modelling

Python

Java

Communication skills

Analytical skills

Cloud

Containers

Linux

Windows

Active Directory

Ausbildung

Bachelor’s degree in computer science, cybersecurity or related field

OSCP/OSEP or similar certifications

Tools

Burp Suite

Metasploit

Nmap

Jobbeschreibung

iFAST Corporation is seeking a Cyber Security Engineer specializing in Red Team and Penetration Testing. You will perform security assessments of web, mobile, and API apps, collaborate with developers and DevSecOps to fix findings and improve the CI/CD pipeline.

You should have 2–4 years in security testing, hands-on with Burp Suite, Metasploit and Nmap, and strong OWASP/API security knowledge. OSCP/OSEP is a plus. Kuala Lumpur, Malaysia based role with hybrid possibilities.