Senior Pentester

Ensign InfoSecurity; Selangor; On-site; MYR 159,108 - 278,440; Full time

Job summary

Ensign InfoSecurity in Selangor, Malaysia is seeking a skilled Penetration Tester to conduct security assessments and penetration tests on a variety of applications and networks. The ideal candidate will have a strong background in cybersecurity along with hands-on experience with penetration testing tools and techniques.

Applicants must hold a Bachelor’s degree and possess between 2–5 years of relevant experience. Senior candidates with over 5 years are encouraged to apply, as leadership experience will be valued.

Qualifications

• 2–5 years of experience in penetration testing or offensive security.
• Hands‑on experience conducting web and network penetration tests.
• Experience preparing formal penetration testing reports.
• Senior level: 5+ years with leadership or project ownership experience.

Responsibilities

• Conduct penetration testing on web applications, mobile applications, networks, and cloud environments.
• Identify and exploit security weaknesses in systems and applications.
• Prepare detailed penetration testing reports with findings and recommendations.
• Utilize industry tools for security assessments and develop custom scripts.
• Support compliance‑driven assessments such as PCI‑DSS.

Skills

Penetration testing

Vulnerability assessments

Web application security

Network security

Risk assessment

Education

Bachelor’s degree in Cybersecurity, Computer Science, IT

Tools

Burp Suite

Metasploit

Nmap

Nessus/OpenVAS

Wireshark

SQLmap

Kali Linux

Job description

Key Responsibilities

• Penetration Testing & Security Assessments – conduct penetration testing on web applications (OWASP Top 10), mobile applications (iOS/Android), internal and external networks, APIs and web services, cloud environments (AWS, Azure, GCP). Perform vulnerability assessments using automated and manual techniques. Simulate real‑world attack scenarios, including privilege escalation and lateral movement.

• Exploitation & Validation – identify and exploit security weaknesses in systems and applications. Develop proof‑of‑concept exploits to validate findings. Assess the impact and risk severity of vulnerabilities discovered.

• Reporting & Documentation – prepare detailed penetration testing reports, including executive summary, technical findings, risk ratings and remediation recommendations. Present findings to technical teams and management. Provide remediation validation (re‑test) services.

• Tools & Techniques – utilize industry tools such as Burp Suite, Metasploit, Nmap, Nessus/OpenVAS, Wireshark, SQLmap, Kali Linux toolsets. Develop custom scripts (Python, Bash, PowerShell) where necessary. Stay updated on latest attack techniques, CVEs and threat trends.

• Compliance & Standards – conduct testing aligned with OWASP Testing Guide, PTES, NIST frameworks, ISO 27001 controls. Support compliance‑driven assessments such as PCI‑DSS.

Requirements

• Bachelor’s degree in Cybersecurity, Computer Science, IT or related field.

• 2–5 years of experience in penetration testing or offensive security.

• Hands‑on experience conducting web and network penetration tests.

• Experience preparing formal penetration testing reports.

• Senior level: 5+ years with leadership or project ownership experience.