Senior Penetration Tester

Talent Porter; Kuala Lumpur; On-site; MYR 120,000 - 180,000; Full time

Job summary

Talent Porter is seeking an experienced Senior Penetration Tester to deliver hands-on offensive security assessments for external clients across web apps, APIs, networks, and cloud environments. The role emphasizes real-world exploitation, red team exercises, and thorough reporting to support remediation efforts.

Applicants should have 4+ years in penetration testing, with vendor/consultancy experience preferred.

Qualifications

• At least 4 years of hands-on penetration testing experience.
• Experience with cybersecurity vendors or testing consultancies is preferred.
• Strong ability to test web apps, APIs, networks and mobile apps.
• Experience with vulnerability exploitation and attack path analysis.
• Experience preparing technical PT reports and remediation guidance.

Responsibilities

• Deliver hands-on penetration testing and offensive security assessments for external clients.
• Test across web apps, APIs, mobile apps, networks and cloud environments.
• Identify vulnerabilities, validate findings and exploit where appropriate.
• Run red team exercises and adversary simulations to assess controls.
• Document evidence, risk ratings and remediation recommendations in reports.
• Present findings and recommendations to clients with clear remediation steps.

Skills

Penetration testing

Offensive security

Web application testing

API testing

Network testing

Cloud security testing

OWASP

MITRE ATT&CK

Adversary simulation

Report writing

Education

Bachelor’s degree in Cybersecurity or related field

OSCP or CREST CRT or equivalent certifications

Tools

Burp Suite

Nmap

Metasploit

Nessus

Job description

Talent Porter is representing a confidential client seeking an experienced Senior Penetration Tester from a cybersecurity vendor, penetration testing consultancy or security services provider.

The role involves delivering hands-on penetration testing and offensive security assessments for external clients across application, network and cloud environments.

Key Responsibilities

• Conduct penetration testing across web applications, APIs, mobile applications and network infrastructure.
• Identify, validate and exploit vulnerabilities involving authentication, access controls, application security and infrastructure configurations.
• Execute red team exercises and adversary simulations to assess real-world attack scenarios and security controls.
• Perform vulnerability analysis using recognised methodologies such as OWASP and MITRE ATT&CK.
• Prepare technical reports documenting exploitation evidence, risk ratings and remediation recommendations.
• Review technical findings and present security assessment results to clients.

Required Skills and Experience

• At least 4 years of hands-on penetration testing or offensive security experience.
• Previous experience with a cybersecurity vendor, penetration testing consultancy or security services provider, delivering assessments for external clients.
• Strong practical experience in web application, API, network and mobile application penetration testing.
• Experience with vulnerability exploitation, privilege escalation and attack path analysis.
• Hands-on exposure to red team exercises and adversary simulation.
• Understanding of OWASP, MITRE ATT&CK and common exploitation techniques.
• Experience preparing technical penetration testing reports and remediation recommendations.
• Extensive hands-on experience conducting complex penetration testing across web applications, APIs, network infrastructure, cloud environments, and Active Directory, with strong capability in vulnerability exploitation and attack-path analysis.
• Familiarity with Burp Suite, Nmap, Metasploit, Nessus or similar tools.

Preferred Qualification

• Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, or a related field, or equivalent relevant professional experience
• OSCP, CREST CRT or equivalent certifications.