Senior Security Engineer: VAPT, Red Team & DevSecOps

Happiest Minds Technologies; Kuala Lumpur; On-site; MYR 180,000 - 240,000; Full time

Job summary

Happiest Minds Technologies in Kuala Lumpur, Malaysia, seeks a Senior Software Engineer-Security to lead VAPT, red team exercises, and DevSecOps integration within CI/CD pipelines. You will collaborate with cross-functional teams to strengthen security controls and align with OWASP, NIST, and SSDF.

The role requires 5+ years in security engineering, hands-on experience with Burp Suite, Nmap, Metasploit, and cloud security assessments in Azure and AWS, plus OSCP or equivalent desirable.

Qualifications

• Bachelor's degree in Computer Science, Information Security, or related field.
• 5+ years of experience in security engineering or related role.
• OSCP certification or equivalent desirable.

Responsibilities

• Perform comprehensive Vulnerability Assessments and Penetration Testing (VAPT) across web apps, APIs, cloud environments, and enterprise infrastructure.
• Execute Red Team engagements emulating real-world adversaries using MITRE ATT&CK.
• Integrate DevSecOps practices into CI/CD pipelines with tools like GitHub Actions, GitLab CI, Jenkins, Checkmarx, SonarQube, Trivy, and Semgrep.
• Conduct threat modeling, secure code reviews, and IaC assessments for Terraform and CloudFormation.

Skills

application security

VAPT

Burp Suite

Nmap

Metasploit

cloud security

MITRE ATT&CK

DevSecOps

CI/CD

Education

Bachelor's degree in Computer Science or related field

Tools

Burp Suite

Nmap

Metasploit

ScoutSuite

Prowler

Pacu

Terraform

CloudFormation

Job description

Happiest Minds Technologies in Kuala Lumpur, Malaysia, seeks a Senior Software Engineer-Security to lead VAPT, red team exercises, and DevSecOps integration within CI/CD pipelines. You will collaborate with cross-functional teams to strengthen security controls and align with OWASP, NIST, and SSDF.

The role requires 5+ years in security engineering, hands-on experience with Burp Suite, Nmap, Metasploit, and cloud security assessments in Azure and AWS, plus OSCP or equivalent desirable.