Senior Penetration Tester — Offensive Security Lead

Talent Porter; Kuala Lumpur; Presencial; MYR 120.000 - 180.000; Jornada completa

Descripción de la vacante

Talent Porter is seeking an experienced Senior Penetration Tester to deliver hands-on offensive security assessments for external clients across web apps, APIs, networks, and cloud environments. The role emphasizes real-world exploitation, red team exercises, and thorough reporting to support remediation efforts.

Applicants should have 4+ years in penetration testing, with vendor/consultancy experience preferred.

Formación

• At least 4 years of hands-on penetration testing experience.
• Experience with cybersecurity vendors or testing consultancies is preferred.
• Strong ability to test web apps, APIs, networks and mobile apps.
• Experience with vulnerability exploitation and attack path analysis.
• Experience preparing technical PT reports and remediation guidance.

Responsabilidades

• Deliver hands-on penetration testing and offensive security assessments for external clients.
• Test across web apps, APIs, mobile apps, networks and cloud environments.
• Identify vulnerabilities, validate findings and exploit where appropriate.
• Run red team exercises and adversary simulations to assess controls.
• Document evidence, risk ratings and remediation recommendations in reports.
• Present findings and recommendations to clients with clear remediation steps.

Conocimientos

Penetration testing

Offensive security

Web application testing

API testing

Network testing

Cloud security testing

OWASP

MITRE ATT&CK

Adversary simulation

Report writing

Educación

Bachelor’s degree in Cybersecurity or related field

OSCP or CREST CRT or equivalent certifications

Herramientas

Burp Suite

Nmap

Metasploit

Nessus

Descripción del empleo

Talent Porter is seeking an experienced Senior Penetration Tester to deliver hands-on offensive security assessments for external clients across web apps, APIs, networks, and cloud environments. The role emphasizes real-world exploitation, red team exercises, and thorough reporting to support remediation efforts.

Applicants should have 4+ years in penetration testing, with vendor/consultancy experience preferred.