Security Consultants (Penetration Testers)

ProCheckUp Sdn Bhd; Selangor; On-site; MYR 150,000 - 200,000; Full time

Job summary

A leading security consultancy in Malaysia is seeking an experienced Security Consultant to join their team. The role involves delivering penetration testing engagements for high-profile clients, performing both application and infrastructure testing, and contributing to team development. Candidates should have a strong background in penetration testing methodologies and tools, as well as excellent communication skills. The position offers opportunities for professional growth and skill enhancement.

Qualifications

• Experience in both application and infrastructure penetration testing.
• Demonstrable knowledge of penetration testing tools and standards.
• Ability to test mobile applications and various technologies.

Responsibilities

• Deliver penetration testing engagements for large, high-profile clients.
• Perform security testing on applications and infrastructures.
• Contribute to team growth by training junior members.

Skills

Experience with infrastructure and application penetration testing

Knowledge of OWASP and OSSTMM standards

Proficiency in penetration testing tools (Burp Suite, Nessus, etc.)

Ability to write high quality penetration testing reports

Excellent written and verbal communication skills

Education

Industry leading security qualifications (OSCP, CREST CRT/CCT)

Tools

Burp Suite

Nessus

Nmap

Kali Linux

Metasploit

Job description

Security Consultants (Penetration Testers)

These are very exciting times here at ProCheckUp and, due to an ambitious expansion plan we have identified the need to increase our team of highly skilled security consultants, especially in our Malaysia office.

We are looking for an experienced Malaysian-based Security Consultant to strengthen the consulting team at this well established security consultancy. The successful candidate will have demonstrable knowledge and experience of penetration testing, preferably supported by industry leading qualifications.

The role: You will be delivering a wide variety of penetration testing engagements to large, high profile clients. You will have experience with both application and infrastructure penetration testing and ideally be able to exploit code. You will be joining a growing team so there are lots of opportunities to progress, learn new skills and train junior members.

Responsibilities

• Deliver penetration testing engagements for large, high-profile clients.
• Perform both application and infrastructure security testing and, where applicable, exploit code.
• Contribute to team growth by sharing knowledge and training junior members.

Skills

• Experience with infrastructure and application penetration testing both external and internal, utilising the OWASP and OSSTMM open standards and other standards.
• Experience using penetration testing tools such as Burp Suite, Nessus, Nmap, SQLmap, Kali Linux, Metasploit, etc.
• Experience in testing various types of technologies, such as mobile applications (Android/iOS), Citrix, VPN, VoIP, SCADA, firewalls, etc.
• Experience in testing both Windows and Linux environments.
• Ability to write solid, high quality penetration testing reports.
• Excellent written and verbal communication skills.

Nice To Haves

• Security qualifications such as OSCP, CREST CRT/CCT would be a great advantage.
• Programming/Scripting ability in Python, Perl, Java.
• Red teaming experience.

Application questions

• Which of the following types of qualifications do you have?
• Which of the following statements best describes your right to work in Malaysia?
• How many years' experience do you have in a consulting role?
• How many years' experience do you have as a Security Consultant?
• What is your expected monthly basic salary?
• How would you rate your English language skills?
• Which of the following languages are you fluent in?
• How much notice are you required to give your current employer?