VAPT Practice Lead: Strategy, Delivery & Growth

EC-Council International Limited; Kuala Lumpur; On-site; MYR 240,000 - 360,000; Full time

Job summary

EC-Council International Limited in Kuala Lumpur is seeking a Senior VAPT Practice Head to own end-to-end VAPT lifecycle, drive testing methodologies, and act as a technical ambassador for clients. You will scale the practice, ensure deliverable quality, and grow revenue through pre-sales and relationship management.

The role requires deep offensive security expertise, leadership, and the ability to engage with C-suite stakeholders while expanding services across Red Teaming, Cloud Security,

Qualifications

• Advanced expertise in Web App, Mobile, Network, Cloud, API, and Wireless security testing.
• Proficiency with tools and ability to develop custom automation scripts.
• Knowledge of OWASP Top 10, NIST SP 800-115, PCI-DSS, HIPAA, GDPR.

Responsibilities

• Define and execute long-term vision for the VAPT practice, including expanding service lines.
• Establish and evolve standardized testing frameworks to ensure high-quality results.
• Lead recruitment, mentoring, and training for a team of penetration testers.
• Evaluate and manage security testing stack to increase efficiency and coverage.
• Manage the practice budget and drive profitability through efficient delivery.

Skills

Advanced Penetration Testing

Offensive Security Mastery

Security Frameworks

Technical Pre-Sales

Leadership

Communication

Strategic Thinking

Project Management

Python/Bash/Go scripting

Education

Bachelor’s or Master’s degree in Computer Science, Cybersecurity, Information Technology

Tools

Burp Suite Professional

Metasploit

Nessus

Nmap

Cobalt Strike

Job description

EC-Council International Limited in Kuala Lumpur is seeking a Senior VAPT Practice Head to own end-to-end VAPT lifecycle, drive testing methodologies, and act as a technical ambassador for clients. You will scale the practice, ensure deliverable quality, and grow revenue through pre-sales and relationship management.

The role requires deep offensive security expertise, leadership, and the ability to engage with C-suite stakeholders while expanding services across Red Teaming, Cloud Security,