Senior Penetration Tester: Lead Engagements & Automation

Axonect; Kuala Lumpur; On-site; MYR 120,000 - 180,000; Full time

Job summary

Axonect is seeking a Senior Security Engineer to independently lead penetration testing engagements across web, mobile, API, network, AD and cloud environments. You will mentor junior consultants, drive testing standards, and provide escalation support while coordinating across concurrent assessments.

The role requires strong scripting skills and hands-on experience with AWS/Azure security, aiming to continuously improve testing methodologies and deliver high-quality assessments for stakeholders.

Qualifications

• 3 to 5 years of hands-on penetration testing experience.
• Strong expertise across Web, Mobile, API, Network, AD and Cloud security testing.
• Experience leading penetration testing engagements independently.
• Experience mentoring junior consultants and performing technical quality reviews.
• Strong understanding of Active Directory attack paths, privilege escalation and post-exploitation techniques.
• Experience assessing AWS and/or Azure cloud environments.
• Ability to write scripts and automate offensive security workflows.
• Excellent written and verbal English communication skills.
• Exposure to AI security testing, including LLM prompt injection, agent abuse, indirect prompt injection, tool-chain security review and AI application security assessment

Responsibilities

• Lead and execute web, mobile, API, network, cloud and Active Directory penetration tests
• Lead engagements from scoping, execution and reporting through stakeholder presentations
• Review penetration testing reports and technical deliverables for quality, consistency and accuracy
• Provide technical escalation support for junior consultants and VM analysts
• Mentor team members through coaching, report reviews and technical workshops
• Support engagement planning, estimation and resource allocation across concurrent assessments
• Drive methodology improvements, testing standards and automation initiatives
• Support remediation discussions with business and technology stakeholders
• Act as delegated operational lead when required

Skills

Penetration testing

Web security testing

Mobile security testing

API security testing

Network security testing

Active Directory security

Cloud security testing

Scripting & automation

English communication

AI security testing

Job description

Axonect is seeking a Senior Security Engineer to independently lead penetration testing engagements across web, mobile, API, network, AD and cloud environments. You will mentor junior consultants, drive testing standards, and provide escalation support while coordinating across concurrent assessments.

The role requires strong scripting skills and hands-on experience with AWS/Azure security, aiming to continuously improve testing methodologies and deliver high-quality assessments for stakeholders.