Senior Application Security Penetration Testing Manager

NTT DATA, Inc.; Kuala Lumpur; Presencial; MYR 240 000 - 360 000; Tempo integral

Resumo da oferta

NTT DATA, Inc. is seeking a Test Manager, Application Security and Penetration Testing in Kuala Lumpur. This hands-on manager will lead penetration testing for web, mobile, and API apps, perform secure code reviews, SCA, container image assurance, and vulnerability assessments, and drive remediation with development and DevOps teams.

The role requires strong technical expertise, MAS/RMiT familiarity, and ability to embed security controls into CI/CD pipelines and support regulatory audits.

Qualificações

• Bachelor’s degree required in Information Security, CS, or related field.
• Certifications such as CREST, OSCP+, OSEP, or GPEN preferred.
• 7+ years IT security experience with 4+ years in penetration testing for web/mobile/API.
• Experience in secure code reviews, SCA, container image assurance, and vulnerability assessments.
• Strong knowledge of web/mobile/API security and OWASP Top 10.
• Hands-on with Burp Suite, OWASP ZAP, Fortify, Checkmarx, Black Duck, Nessus, Aqua, Qualys.
• Familiar with MAS TRM, MAS Cyber Hygiene, and BNM RMiT requirements.

Responsabilidades

• Conduct penetration testing for web, mobile, and API applications.
• Perform secure code reviews, SCA, and container image assurance.
• Perform vulnerability assessments for applications, middleware, and supporting systems.
• Triage, validate, and prioritise security findings.
• Collaborate with development, DevOps, and infrastructure teams for remediation.
• Track and report remediation progress per regulatory timelines.
• Provide guidance on secure coding practices.
• Embed application security controls (SAST, DAST, SCA, IAST) into CI/CD pipelines.
• Maintain security documentation for audits and regulatory reviews.
• Ensure compliance with internal policies and regulatory obligations.
• Support audits and regulatory inspections involving application security.

Conhecimentos

Penetration testing

Secure code review

SCA/container security

Vulnerability assessment

OWASP Top 10

Security testing tools

MAS TRM / MAS Cyber Hygiene / BNM RMiT

Formação académica

Bachelor’s degree in Information Security or Computer Science

Professional certifications CREST, OSCP+, OSEP, GPEN

Ferramentas

Burp Suite

OWASP ZAP

Fortify

Checkmarx

Black Duck

Nessus

Aqua

Qualys

Descrição da oferta de emprego

NTT DATA, Inc. is seeking a Test Manager, Application Security and Penetration Testing in Kuala Lumpur. This hands-on manager will lead penetration testing for web, mobile, and API apps, perform secure code reviews, SCA, container image assurance, and vulnerability assessments, and drive remediation with development and DevOps teams.

The role requires strong technical expertise, MAS/RMiT familiarity, and ability to embed security controls into CI/CD pipelines and support regulatory audits.