Senior Penetration Testing Lead

Axonect; Kampung Malaysia Tambahan; On-site; MYR 180,000 - 260,000; Full time

Job summary

Axonect is seeking a technical Senior Security Engineer to independently lead penetration testing engagements across web, mobile, API, network, AD and cloud environments. The role involves mentoring junior consultants, reviewing assessment quality, and ensuring operational continuity for the Penetration Testing Lead when required.

The ideal candidate has 3–5 years of hands-on experience, strong AD and cloud testing expertise, and scripting skills to automate workflows.

Qualifications

• Minimum 3 to 5 years of hands-on penetration testing experience.
• Experience across Web, Mobile, API, Network, Active Directory and Cloud testing.
• Proven ability to lead penetration testing engagements independently.
• Mentor junior consultants and perform technical quality reviews.
• Strong understanding of Active Directory attack paths, privilege escalation and post-exploitation techniques.
• Experience assessing AWS and/or Azure cloud environments.
• Ability to write scripts and automate offensive security workflows.
• Excellent written and verbal English communication skills.
• Exposure to AI security testing incl. prompt injection, agent abuse, indirect prompt injection and AI app security assessment.

Responsibilities

• Lead and execute web, mobile, API, network, cloud and AD penetration tests.
• Manage engagements from scoping to reporting and stakeholder presentations.
• Review penetration testing reports for quality and accuracy.
• Provide technical escalation support and mentor junior consultants.
• Coach team members through reviews and technical workshops.
• Support engagement planning, estimation and resource allocation.
• Drive methodology improvements and automation initiatives.
• Engage with business and technology stakeholders on remediation discussions.
• Act as operational lead when required.

Skills

Penetration testing

Cloud security testing

Active Directory testing

Scripting (Python/PowerShell)

Mentoring

Report reviews

English communication

AI security testing

Tools

AWS

Azure

Job description

Axonect is seeking a technical Senior Security Engineer to independently lead penetration testing engagements across web, mobile, API, network, AD and cloud environments. The role involves mentoring junior consultants, reviewing assessment quality, and ensuring operational continuity for the Penetration Testing Lead when required.

The ideal candidate has 3–5 years of hands-on experience, strong AD and cloud testing expertise, and scripting skills to automate workflows.