Senior AppSec Engineer — Penetration Testing

TNG Digital Sdn Bhd; Kuala Lumpur; On-site; MYR 180,000 - 320,000; Full time

Job summary

TNG Digital Sdn Bhd in Kuala Lumpur seeks a Specialist, Application Security to plan and execute regular security testing across mobile and web apps, APIs, and infrastructure. You will work with risk, development and QA teams to identify and remediate vulnerabilities.

The role demands 5–7 years of offensive security experience, strong hands-on testing, and relevant certifications; OSCP/OSWE/OSCE and similar are preferred. This is a permanent on-site role in Kuala Lumpur.

Qualifications

• Bachelor’s degree required in CS/InfoSec or related field.
• Minimum 5–7 years of hands-on red teaming, penetration testing, or offensive security roles.
• Strong experience in web, mobile app, and API security testing; reverse engineering and tooling.

Responsibilities

• Plan and perform regular security tests on frontend and backend apps.
• Review backend APIs and web services regularly.
• Conduct vulnerability assessments across IT assets.
• Perform host configuration reviews on OS and network devices.
• Report vulnerabilities succinctly and drive remediation with stakeholders.
• Coordinate with risk, development, and QA teams to close issues.

Skills

Penetration testing

Web security

Mobile security

API security

Reverse engineering

Scripting

Exploit development

Offensive security

Threat modeling

Education

Bachelor’s degree in Computer Science, Information Security, or related technical field

Tools

Frida

Burp Suite

MobSF

Job description

TNG Digital Sdn Bhd in Kuala Lumpur seeks a Specialist, Application Security to plan and execute regular security testing across mobile and web apps, APIs, and infrastructure. You will work with risk, development and QA teams to identify and remediate vulnerabilities.

The role demands 5–7 years of offensive security experience, strong hands-on testing, and relevant certifications; OSCP/OSWE/OSCE and similar are preferred. This is a permanent on-site role in Kuala Lumpur.