Senior Penetration Tester - Web, API & App Security

Etiqa Insurance and Takaful; Kuala Lumpur; On-site; MYR 120,000 - 180,000; Full time

Job summary

Etiqa Insurance and Takaful is seeking a Digital Security Penetration Tester to join the CISO Office in Kuala Lumpur. You will engage in security assessments across servers, applications, APIs, and mobile devices, using a mix of automated tools and manual techniques to identify vulnerabilities and validate findings.

The role requires strong knowledge of OWASP Top 10, robust reporting for technical and non‑technical audiences, and collaboration with development teams to recommend practical

Qualifications

• Degree in information security or related field is required.
• Minimum 6 years in cybersecurity, penetration testing, or vulnerability management.
• At least 3 years in Application Security and VAPT.

Responsibilities

• Conduct scheduled and ad-hoc security testing and vulnerability assessments.
• Perform web and mobile app security testing based on OWASP standards.
• Execute manual and automated testing across servers, apps, and APIs.
• Prepare technical reports with remediation recommendations for stakeholders.

Skills

Penetration testing

Vulnerability assessment

Application security

OWASP

Security testing

Education

Bachelor’s degree in Information Security, Cyber Security, Risk Management, Compliance, or related field

Tools

Nessus

Burp Suite

Web Inspect

Source Code Analyzer

Job description

Etiqa Insurance and Takaful is seeking a Digital Security Penetration Tester to join the CISO Office in Kuala Lumpur. You will engage in security assessments across servers, applications, APIs, and mobile devices, using a mix of automated tools and manual techniques to identify vulnerabilities and validate findings.

The role requires strong knowledge of OWASP Top 10, robust reporting for technical and non‑technical audiences, and collaboration with development teams to recommend practical