Senior Penetration Tester

AGENSI PEKERJAAN TRUST RECRUIT SDN. BHD.; Petaling Jaya; On-site; MYR 200,000 - 250,000; Full time

Job summary

A leading recruitment agency in Malaysia is seeking a Senior Penetration Tester responsible for leading penetration testing engagements to identify security vulnerabilities across various environments. The ideal candidate will have 4–6 years of experience, strong report writing skills, and relevant security certifications. You will provide technical guidance to junior team members and stay updated on the latest threats and vulnerabilities. Interested applicants should send their resume in MS WORD format.

Qualifications

• Minimum 4–6 years of hands-on penetration testing experience.
• Proven experience leading penetration testing engagements independently.
• Strong report writing and communication skills.

Responsibilities

• Lead and perform penetration testing activities including web application, network & infrastructure, API, and cloud environments.
• Conduct black-box, grey-box, and white-box testing.
• Develop clear, accurate, and actionable penetration test reports.

Skills

TCP/IP

DNS

HTTP/HTTPS

OWASP ZAP

SQLmap

Nikto

Scripting/Programming

Education

Bachelor’s degree in Computer Science, IT, Cybersecurity

Tools

OWASP ZAP

SQLmap

Nikto

Job description

Job Summary

The Senior Penetration Tester is responsible for planning, executing, and leading penetration testing engagements to identify security vulnerabilities across networks, applications, systems, and cloud environments.

Duties & Responsibilities

• Lead and perform penetration testing activities including web application, network & infrastructure, API, and cloud environments.
• Conduct black-box, grey-box, and white-box testing.
• Identify, exploit, and validate security vulnerabilities using manual and automated techniques.
• Develop clear, accurate, and actionable penetration test reports, including proof of concept (PoC), impact analysis, and remediation recommendations.
• Present findings to clients, management, and technical teams.
• Review and validate findings from junior pentesters.
• Provide technical guidance and mentoring to junior team members.
• Support red team exercises, vulnerability assessments, and security audits.
• Stay current with the latest threats, vulnerabilities, tools, and attack techniques.
• Assist in improving internal testing methodologies, tools, and documentation.
• Ensure testing activities comply with legal, regulatory, and contractual requirements.

Technical Skills

• Strong knowledge of TCP/IP, DNS, HTTP/HTTPS and network architecture and security controls.
• Hands‑on experience with tools such as OWASP ZAP, SQLmap, Nikto.
• In-depth understanding of OWASP Top 10.
• Experience with scripting/programming (at least one language).
• Familiarity with cloud security (AWS, Azure, GCP) is an advantage.

Qualifications

• Minimum 4–6 years of hands‑on penetration testing experience.
• Proven experience leading penetration testing engagements independently.
• Strong report writing and communication skills.
• Bachelor’s degree in Computer Science, IT, Cybersecurity, or equivalent experience.
• Relevant certifications (one or more preferred): OSCP / OSEP / OSWE, CEH / CEH Master, GPEN / GWAPT / GXPN, CREST (CRT, CCT).

How to Apply

Interested applicants, kindly send your resume in MS WORD format to [e-mail] or click on “Apply Now” and provide the required details in your resume. We regret only shortlisted candidates will be notified.

Agensi Pekerjaan Trust Recruit Sdn Bhd is committed to safeguarding your personal data in accordance with the Personal Data Protection Act (PDPA). Please read our privacy statement on our corporate website www.trustrecruit.com.my.