Senior Application Security Penetration Tester

Chemcastle Sdn Bhd; Kuala Lumpur; On-site; MYR 180,000 - 260,000; Full time

Job summary

Chemcastle Sdn Bhd is seeking a Test Manager, Application Security to strengthen our enterprise security posture. This is a hands‑on role focused on penetration testing, secure code reviews, SCA, and CI/CD integration.

You will lead technical testing across web, mobile, and APIs, coordinate remediation with DevOps and development teams, and support audits under MAS TRM and BNM RMiT frameworks. Candidates should have 7+ years IT security experience and CREST/OSCP+ certifications.

Qualifications

• Bachelor’s degree in Information Security, Computer Science, or related field.
• 7+ years IT security experience with hands-on penetration testing for web, mobile, and API apps.
• Certifications such as CREST, OSCP+, OSEP, or GPEN.
• Experience with secure code reviews, SCA, and container image assurance.
• Strong knowledge of OWASP Top 10 and common attack vectors.
• Familiarity with MAS TRM and BNM RMiT requirements.

Responsibilities

• Conduct penetration testing for web, mobile, and API applications.
• Perform secure code reviews, software composition analysis, and container image assurance.
• Perform vulnerability assessments for applications, middleware, and supporting systems.
• Utilise Burp Suite, OWASP ZAP, Fortify, Checkmarx, Black Duck, Nessus, Aqua, and Qualys.
• Triage, validate, and prioritise security findings.
• Collaborate with development, DevOps, and infrastructure teams to remediate.
• Track remediation progress and ensure timely closure per regulatory timelines.
• Provide guidance on secure coding practices.
• Embed security controls into CI/CD pipelines (SAST, DAST, SCA, IAST).
• Maintain security documentation and provide evidence for audits.
• Ensure compliance with internal policies and regulatory obligations.
• Support audits, risk assessments, and regulatory inspections.

Skills

Penetration testing

Secure code review

Container security

Vulnerability assessments

CI/CD security

OWASP Top 10

Regulatory knowledge MAS TRM & BNM RMi

Education

Bachelor’s degree in Information Security, Computer Science, or related field

Certifications: CREST, OSCP+, OSEP, GPEN

Tools

Burp Suite

OWASP ZAP

Fortify

Checkmarx

Black Duck

Nessus

Aqua

Qualys

Job description

Chemcastle Sdn Bhd is seeking a Test Manager, Application Security to strengthen our enterprise security posture. This is a hands‑on role focused on penetration testing, secure code reviews, SCA, and CI/CD integration.

You will lead technical testing across web, mobile, and APIs, coordinate remediation with DevOps and development teams, and support audits under MAS TRM and BNM RMiT frameworks. Candidates should have 7+ years IT security experience and CREST/OSCP+ certifications.