Senior Security Tester – Banking & Cloud (Hybrid)

GFT Technologies APAC & GCC; Kuala Lumpur; Hybrid; MYR 368,000 - 613,000; Full time

Job summary

GFT Technologies APAC & GCC is seeking a Senior Penetration Tester to assess security across banking applications, APIs, cloud platforms, and infrastructure, conducting authorised testing and reporting risks.

The role requires strong ethical hacking expertise and the ability to work with cross-functional teams, with potential onsite client work and relocation to Vietnam. Prior experience in banking security and threat modelling is highly valued.

Qualifications

• Hands-on penetration testing across web, mobile, API, network, and cloud environments.
• Strong banking domain knowledge including payments, AML/KYC, fraud management, and digital banking workflows.
• Deep knowledge of web/API security, including OWASP Top 10 and related controls.
• Experience testing iOS/Android apps with secure storage and TLS/PKI considerations.
• Ability to communicate findings clearly to technical and business stakeholders.

Responsibilities

• Conduct penetration testing across web, mobile, APIs, cloud, infrastructure, and banking platforms.
• Identify, validate, and document vulnerabilities with risk ratings and remediation guidance.
• Perform security assessments using OWASP and banking standards.
• Produce detailed penetration testing reports with evidence and remediation steps.
• Collaborate with engineering/security teams to validate fixes and support remediation.

Skills

Penetration testing

Ethical hacking

Vulnerability assessments

Banking domain knowledge

Web and API security

Cloud security basics

Report writing

Security communication

Retesting

Threat modelling

Tools

Burp Suite

OWASP ZAP

Nmap

Nessus

Metasploit

Wireshark

Postman

MobSF

Job description

GFT Technologies APAC & GCC is seeking a Senior Penetration Tester to assess security across banking applications, APIs, cloud platforms, and infrastructure, conducting authorised testing and reporting risks.

The role requires strong ethical hacking expertise and the ability to work with cross-functional teams, with potential onsite client work and relocation to Vietnam. Prior experience in banking security and threat modelling is highly valued.