Senior Penetration Testing Lead

XL Axiata; Kuala Lumpur; On-site; MYR 180,000 - 240,000; Full time

Job summary

XL Axiata is seeking a Senior Security Engineer for Penetration Testing in Kuala Lumpur, Malaysia. The role involves independently leading testing engagements across web, mobile, API, network, cloud and AD, serving as a technical escalation point, mentoring juniors, reviewing assessment quality, and providing continuity for the Penetration Testing Lead when needed.

The ideal candidate has 3–5 years of hands-on penetration testing experience, strong AD and cloud security knowledge, scripting

Qualifications

• Minimum 3 to 5 years of hands-on penetration testing experience
• Strong expertise across Web, Mobile, API, Network, Active Directory and Cloud securitytesting
• Demonstrated experience leading penetration testing engagements independently
• Experience mentoring junior consultants and performing technical quality reviews
• Strong understanding of Active Directory attack paths, privilege escalation and post-exploitation techniques
• Experience assessing AWS and/or Azure cloud environments
• Ability to write scripts and automate offensive security workflows
• Excellent written and verbal English communication skills
• Exposure to AI security testing, including LLM prompt injection, agent abuse, indirectprompt injection, tool-chain security review and AI application security assessment

Responsibilities

• Lead and execute penetration testing engagements across web, mobile, API, network, cloud and AD environments
• Lead engagements from scoping, execution and reporting through stakeholder presentations
• Review penetration testing reports and technical deliverables for quality, consistency and accuracy
• Provide technical escalation support for junior consultants and VM analysts
• Mentor team members through coaching, report reviews and technical workshops
• Support engagement planning, estimation and resource allocation across concurrent assessments
• Drive methodology improvements, testing standards and automation initiatives
• Support remediation discussions with business and technology stakeholders
• Act as delegated operational lead when required

Skills

Penetration testing

Web security

Mobile security

API security

Network security

Cloud security

Active Directory security

Scripting

Automation

Job description

XL Axiata is seeking a Senior Security Engineer for Penetration Testing in Kuala Lumpur, Malaysia. The role involves independently leading testing engagements across web, mobile, API, network, cloud and AD, serving as a technical escalation point, mentoring juniors, reviewing assessment quality, and providing continuity for the Penetration Testing Lead when needed.

The ideal candidate has 3–5 years of hands-on penetration testing experience, strong AD and cloud security knowledge, scripting