Senior Executive - Cybersecurity

BDO Malaysia; Kuala Lumpur; On-site; MYR 60,000 - 110,000; Full time

Job summary

BDO Malaysia is seeking a Senior Executive to support vulnerability assessment and penetration testing across web applications, APIs, mobile applications, networks, operating systems, databases, cloud environments, and other technology platforms.

This role involves performing security testing, identifying vulnerabilities, validating findings, preparing reports, and providing remediation guidance to help clients strengthen their security posture.

Qualifications

• Degree in Cybersecurity, Information Security, IT, Computer Science or related field with at least a Second Class Upper or equivalent.
• Minimum of 2–3 years of hands-on experience in vulnerability assessment, penetration testing, or cybersecurity work.
• Good understanding of TCP/IP networking, web app security, OS security, OWASP Top 10 and auth mechanisms.
• Familiarity with security testing tools, APIs, cloud environments, containers or CI/CD security concepts is a plus.
• Relevant cybersecurity certifications (e.g., CompTIA Security+, CEH, eJPT, CREST CPSA) are advantageous.

Responsibilities

• Support vulnerability assessment and penetration testing across web apps, APIs, mobile apps, networks, OS, databases and cloud environments.
• Perform automated and manual security testing to identify vulnerabilities and misconfigurations.
• Validate findings, eliminate false positives, and document results clearly.
• Perform offensive security activities including attack simulations and validation of controls across client environments.
• Prepare VAPT reports with findings, evidence, risk ratings, and remediation recommendations.
• Engage with clients and internal stakeholders on findings and remediation actions.
• Assist in remediation validation and retesting to verify fixes.
• Contribute to testing procedures, templates and knowledge-sharing materials.
• Participate in red team exercises and security assessments when required.

Skills

Analytical thinking

Report writing

Communication

Task management

Proactive learner

Education

Second Class Upper or equivalent

Tools

Security testing tools

APIs security

Cloud security

Containers

CI/CD security

Job description

BDO in Malaysia is part of the leading global professional services network, BDO International, providing audit, tax, advisory, business and outsourcing services to clients across diverse industries. With over 60 years of experience, we are supported by more than 1,200 professionals — including over 200 Partners and Directors — across offices in Malaysia, Brunei, Cambodia, Lao PDR, Myanmar and Vietnam.

At BDO, we shape what matters:

We grow together, to reach higher.

We collaborate, show up for one another, and build meaningful relationships — growing our careers in a workplace where we can thrive and belong.

We shape solutions, to go further.

We take ownership of our careers, stay curious, and are brave to share new ideas and shape how things are done.

We build trust, to lead purposefully.

Trust and integrity are the foundation of everything we do. We hold ourselves to the highest standards, leading with purpose while delivering quality outcomes.

Whether you’re starting or advancing your career, you won’t do it alone. From building meaningful careers for our people to shaping solutions for our clients, at BDO, we do it together. Come and shape what matters with us.

Overview

As a Senior Executive, you will support vulnerability assessment and penetration testing engagements across web applications, APIs, mobile applications, networks, operating systems, databases, cloud environments, and other technology platforms. This role involves performing security testing, identifying vulnerabilities, validating findings, preparing reports, and providing remediation guidance to help clients strengthen their security posture.

Key Responsibilities

• Support vulnerability assessment and penetration testing activities across web applications, APIs, mobile applications, internal and external networks, operating systems, databases, and cloud environments
• Perform automated and manual security testing to identify vulnerabilities, misconfigurations, and security weaknesses
• Validate security findings, assist in eliminating false positives, and document assessment results clearly
• Perform offensive security activities, including attack simulation, vulnerability exploitation and validation of security controls across client environment
• Research emerging threats, vulnerabilities, tools, and attack techniques to support continuous learning and improvement
• Prepare VAPT reports, including findings, evidence, risk ratings, and remediation recommendations
• Support discussions with clients and internal stakeholders on security findings and remediation actions
• Assist in remediation validation and retesting activities to confirm that identified vulnerabilities have been addressed
• Contribute to internal testing procedures, templates, and knowledge-sharing materials
• Participate in red team exercises and security assessments when required

Education and professional skills / knowledge

Experience & Education

• A recognised degree in Cybersecurity, Information Security, Information Technology, Computer Science, or a related field with at least a Second Class Upper or equivalent
• Minimum of 2-3 years of hands-on experience in vulnerability assessment, penetration testing, or cybersecurity-related work
• Good understanding of TCP/IP networking, web application security, operating system security, OWASP Top 10 vulnerabilities, Authentication and authorization mechanisms and common security testing concepts
• Familiarity with common security testing tools, APIs, cloud environments, containers, or CI/CD security concepts will be an added advantage
• Relevant cybersecurity certifications such as CompTIA Security+, CEH, eJPT, CREST CPSA, or equivalent will be an added advantage

Other skills

• Strong analytical and problem‑solving skills with good attention to detail
• Good report writing and documentation skills to translate technical findings into clear, structured, and actionable reports
• Good communication and interpersonal skills to build effective working relationships with clients and internal teams
• Able to manage multiple tasks and deadlines in a fast‑paced environment
• Proactive, self‑motivated, and willing to continuously learn about emerging cybersecurity threats, vulnerabilities, and tools