T&T Consultant - Penetration Tester - TH

Deloitte PLT; Kuala Lumpur; On-site; MYR 60,000 - 80,000; Full time

Job summary

A leading global professional services firm seeks a Penetration Tester in Kuala Lumpur to conduct security assessments on systems and networks. Candidates should possess a Bachelor's degree in information security and have over 2 years of experience in cybersecurity. Strong problem-solving and analytical skills are essential. This role offers opportunities for growth and collaboration within a diverse team.

Qualifications

• 2+ years of experience in IT, audits, or cybersecurity.
• Proven experience as a Penetration Tester or similar.
• Relevant certifications (e.g., CEH, OSCP) are a plus.

Responsibilities

• Conduct security assessments on systems and networks.
• Simulate cyber attacks to identify vulnerabilities.
• Prepare reports on findings of penetration tests.

Skills

Problem-solving

Analytical skills

Collaboration

Time management

Education

Bachelor's degree in information security or related field

Tools

Automated penetration testing tools

Manual testing techniques

Job description

Overview

At Deloitte, our purpose is to make an impact that matters for our clients, our people, and the communities we serve. We believe we have a responsibility to be a force for good, and WorldImpact is our portfolio of initiatives focused on making a tangible impact on society’s biggest challenges and creating a better future. We strive to advise clients on how to deliver purpose‑led growth and embed more equitable, inclusive as well as sustainable business practices. Hence, we seek talented individuals driven to excel and innovate, working together to achieve our shared goals. We are committed to creating positive work experiences that foster a culture of respect and inclusion, where diverse perspectives are celebrated, and everyone is recognised for their contributions. Ready to unleash your potential with us? Join the winning team now!

Identifies and mitigates cyber risks by assessing systems, networks, and applications for vulnerabilities. They simulate real-world attacks, document findings, and provide security improvement recommendations. Staying updated on cybersecurity trends, they collaborate with other professionals to develop comprehensive security strategies.

• Conduct security assessments on systems, networks, and applications.
• Simulate cyber attacks to identify system vulnerabilities.
• Typical security testing activities include:
  • Software/Web Application/Web Services penetration testing
  • Network Penetration Testing
  • Mobile Application Penetration Testing
  • Thick Client Penetration Testing
• Develop and execute penetration testing methodologies.
• Prepare detailed reports on the findings of penetration tests.
• Recommend and implement improvements to security policies.
• Stay updated with the latest penetration testing tools and techniques.
• Train staff on security awareness and procedures.
• Collaborate with IT staff to improve system security.

Your role as a leader

• Actively seek out developmental opportunities for growth, act as strong brand ambassadors for the firm as well as share their knowledge and experience with others.
• Understand the goals of our internal and external stakeholder to set personal priorities as well as align their teams’ work to achieve the objectives.
• Constantly challenge themselves, collaborate with others to deliver on tasks and take accountability for the results.
• Build productive relationships and communicate effectively in order to positively influence teams and other stakeholders.
• Project integrity and confidence while motivating others through team collaboration as well as recognising individual strengths, differences, and contributions.

Requirements

• Bachelor's degree in information security, information systems management, computer science, engineering, or other related discipline.
• More than 2 years of experience in information technology, IT audits, or cyber security.
• Proven experience as a Penetration Tester or similar role in cybersecurity.
• Proficiency in using automated tools and manual testing techniques.
• Strong understanding of common vulnerabilities and exploits.
• Relevant certifications (e.g., CEH, OSCP, CREST) are a plus.
• Excellent problem‑solving and analytical skills.
• Must be able to work under pressure and produce content to tight timelines.
• Ability to self-manage, prioritizing a variety of tasks.

Due to volume of applications, we regret only shortlisted candidates will be notified. Please note that Deloitte will never reach out to you directly via messaging platforms to offer you employment opportunities or request money or your personal information. Kindly apply for roles that you are interested via this official Deloitte website.

#LI-AN

Requisition ID: 110651