Senior Cybersecurity Tester: Vulnerability & Pen Test Lead

BDO Malaysia; Kuala Lumpur; On-site; MYR 60,000 - 110,000; Full time

Job summary

BDO Malaysia is seeking a Senior Executive to support vulnerability assessment and penetration testing across web applications, APIs, mobile applications, networks, operating systems, databases, cloud environments, and other technology platforms.

This role involves performing security testing, identifying vulnerabilities, validating findings, preparing reports, and providing remediation guidance to help clients strengthen their security posture.

Qualifications

• Degree in Cybersecurity, Information Security, IT, Computer Science or related field with at least a Second Class Upper or equivalent.
• Minimum of 2–3 years of hands-on experience in vulnerability assessment, penetration testing, or cybersecurity work.
• Good understanding of TCP/IP networking, web app security, OS security, OWASP Top 10 and auth mechanisms.
• Familiarity with security testing tools, APIs, cloud environments, containers or CI/CD security concepts is a plus.
• Relevant cybersecurity certifications (e.g., CompTIA Security+, CEH, eJPT, CREST CPSA) are advantageous.

Responsibilities

• Support vulnerability assessment and penetration testing across web apps, APIs, mobile apps, networks, OS, databases and cloud environments.
• Perform automated and manual security testing to identify vulnerabilities and misconfigurations.
• Validate findings, eliminate false positives, and document results clearly.
• Perform offensive security activities including attack simulations and validation of controls across client environments.
• Prepare VAPT reports with findings, evidence, risk ratings, and remediation recommendations.
• Engage with clients and internal stakeholders on findings and remediation actions.
• Assist in remediation validation and retesting to verify fixes.
• Contribute to testing procedures, templates and knowledge-sharing materials.
• Participate in red team exercises and security assessments when required.

Skills

Analytical thinking

Report writing

Communication

Task management

Proactive learner

Education

Second Class Upper or equivalent

Tools

Security testing tools

APIs security

Cloud security

Containers

CI/CD security

Job description

BDO Malaysia is seeking a Senior Executive to support vulnerability assessment and penetration testing across web applications, APIs, mobile applications, networks, operating systems, databases, cloud environments, and other technology platforms.

This role involves performing security testing, identifying vulnerabilities, validating findings, preparing reports, and providing remediation guidance to help clients strengthen their security posture.