Senior AI Security & Penetration Engineer

Ryt Bank; Kuala Lumpur; On-site; MYR 180,000 - 240,000; Full time

Job summary

Ryt Bank in Kuala Lumpur is seeking a Senior VAPT Engineer to lead penetration testing, red teaming, and AI security assessments across banking platforms, networks, apps, and APIs. You will independently scope, execute, and report findings to the CISO and board, driving remediation within SLAs.

The role requires 3–7 years of hands-on offense security experience, including mobile/web/API tests, external pentest vendor management, and familiarity with MITRE ATLAS and OWASP Top 10.

Qualifications

• 3–7 years in penetration testing, red teaming, or offensive security roles with independent delivery.
• Proven experience scoping, leading, and reporting on mobile and web apps, API, network, and cloud tests.
• Hands-on testing with mobile, API and web apps; strong AI security testing knowledge.

Responsibilities

• Plan and execute quarterly vulnerability assessments across the bank's infrastructure, apps, and APIs.
• Lead external pentest vendor relationships and coordinate remediation within SLAs.
• Own the bank's AI red-team programme and report findings to leadership.
• Produce clear, board-ready pentest and AI security reports for technical and non-technical audiences.
• Collaborate with engineering, risk, and SOC teams to improve detection and response.

Skills

Offensive security

AI red-team testing

Report writing

Education

OSCP

CREST CPSA/CRT

GIAC GPEN/GWAPT/GXPN

CompTIA PenTest+

Tools

Burp Suite

Metasploit

Nmap

Custom scripting

PyRIT

garak

Promptfoo

Job description

Ryt Bank in Kuala Lumpur is seeking a Senior VAPT Engineer to lead penetration testing, red teaming, and AI security assessments across banking platforms, networks, apps, and APIs. You will independently scope, execute, and report findings to the CISO and board, driving remediation within SLAs.

The role requires 3–7 years of hands-on offense security experience, including mobile/web/API tests, external pentest vendor management, and familiarity with MITRE ATLAS and OWASP Top 10.