Senior Penetration Tester: Banking Security & Cloud Expert

GFT Technologies APAC & GCC; Kuala Lumpur; Hybrid; MYR 96,000 - 144,000; Full time

Job summary

GFT Technologies APAC & GCC is seeking a Lead Penetration Tester to strengthen security across banking apps, APIs, cloud, and digital platforms. The role involves authorised testing, vulnerability validation, remediation support, and compliance with banking security standards.

You will work with security, engineering, DevOps, and business teams across web, mobile, API, and cloud environments, with on-site client engagements as needed.

Qualifications

• Hands-on penetration testing across web, mobile, API, network, and cloud environments.
• Strong banking systems knowledge, digital banking, AML/KYC, and fraud workflows.
• Deep knowledge of OWASP Top 10, API security, IDOR, injection, and access controls.
• Experience testing iOS/Android apps, including authentication and secure storage.
• Knowledge of cloud security principles across AWS/Azure/GCP.
• Ability to produce clear security reports for technical and business stakeholders.

Responsibilities

• Conduct penetration testing across web, mobile, APIs, cloud, infrastructure, and banking platforms.
• Identify, validate, and document security vulnerabilities with risk ratings and remediation guidance.
• Perform assessments using OWASP Top 10, API Top 10, MSTG and banking standards.
• Assess banking workflows including payments, cards, AML/KYC, fraud, and digital banking services.
• Produce penetration testing reports with evidence and remediation recommendations.
• Collaborate with engineering and security teams to explain findings and validate fixes.
• Support SDLC security activities including threat modelling and test planning.
• Perform vulnerability validation, exploitability checks, and false-positive elimination.
• Assist audits with security evidence and remediation tracking.
• Stay updated on threats and security best practices.

Skills

Penetration testing

Ethical hacking

Vulnerability assessments

Banking domain knowledge

Web and API security

Mobile security (iOS/Android)

Cloud security (AWS/Azure/GCP)

Security reporting & stakeholder comms

Remediation validation & retesting

Secure coding concepts

Tools

Burp Suite

OWASP ZAP

Nmap

Nessus

Metasploit

Wireshark

Postman

MobSF

Job description

GFT Technologies APAC & GCC is seeking a Lead Penetration Tester to strengthen security across banking apps, APIs, cloud, and digital platforms. The role involves authorised testing, vulnerability validation, remediation support, and compliance with banking security standards.

You will work with security, engineering, DevOps, and business teams across web, mobile, API, and cloud environments, with on-site client engagements as needed.