Senior Offensive Security Advisory Lead

Telekom Malaysia; Kuala Lumpur; On-site; MYR 180,000 - 260,000; Full time

Job summary

Telekom Malaysia is seeking a senior professional to lead Offensive Security Advisory engagements, from opportunity identification through remediation validation and project closure. You will own presales advisory, testing design, and execution, ensuring quality, and delivering executive-level reporting for TM One’s offensive security services.

The role emphasizes leadership in infrastructure, web/app/ cloud security testing, red team, purple team, and advanced adversary simulations, with

Qualifications

• Bachelor's degree in Cybersecurity, Computer Science, Information Technology, Engineering or related field.
• A relevant Master's Degree is an advantage.
• Minimum 5 years in cybersecurity architecture and consulting, hands-on Offensive Security experience.
• Certification expectation: At least one advanced hands-on offensive security certification is strongly preferred. Leadership credentials are advantageous.

Responsibilities

• Act as the lead customer-facing SME for Offensive Security Advisory opportunities.
• Lead discovery and scoping workshops.
• Assess customer threat profiles, critical assets and testing objectives.
• Recommend appropriate testing approaches and methodologies.
• Develop proposals, Statements of Work (SOW), testing plans and effort estimates.
• Define Rules of Engagement, authorisation requirements and success criteria.
• Support RFP/RFQ/tender activities and customer presentations.
• Identify cybersecurity improvement and follow-on opportunities.
• Lead infrastructure, web application, API, mobile, cloud and identity security assessments.
• Lead Red Team and adversary simulation exercises.
• Oversee Active Directory attack-path, privilege escalation and assumed breach assessments.
• Conduct ransomware simulation and authorised social engineering engagements.
• Lead Purple Team exercises and attack-path validation activities.
• Ensure vulnerabilities and attack paths are appropriately validated.
• Facilitate remediation workshops, retesting and closure validation activities.
• Serve as engagement lead for offensive security assignments.
• Approve scope, methodologies, testing plans and Rules of Engagement.
• Ensure delivery remains within approved engagement boundaries.
• Manage critical finding escalation and customer communication.
• Review evidence, findings and remediation recommendations.
• Review technical and executive reports before customer submission.
• Ensure secure retention and disposal of testing artefacts and customer data.

Skills

Offensive security

Cybersecurity consulting

Engagement leadership

Education

Bachelor's degree in Cybersecurity/CS/IT/Engineering

Master's degree (advantage)

Tools

Burp Suite

Cloud security tools

Active Directory security tools

Job description

Telekom Malaysia is seeking a senior professional to lead Offensive Security Advisory engagements, from opportunity identification through remediation validation and project closure. You will own presales advisory, testing design, and execution, ensuring quality, and delivering executive-level reporting for TM One’s offensive security services.

The role emphasizes leadership in infrastructure, web/app/ cloud security testing, red team, purple team, and advanced adversary simulations, with