Commerz Global Service Solutions
THE LANGUAGE GROUP, LLC
Randstad
THE LANGUAGE GROUP, LLC
CYPHER LAB SDN. BHD.
Brighten Business Consulting
Randstad
Connect with headhunters to apply for similar jobsSyneos Health, Inc.
CoverGo
Vacuumschmelze
CoverGo
CYPHER LAB SDN. BHD.
Brighten Business Consulting
Black Dots Marketing
Vacuumschmelze
Randstad
Black Dots Marketing
MOXE CONSULTATION SDN. BHD.
Mine Vision Systems
MOXE CONSULTATION SDN. BHD.
Freelancing.my
Freelancing.my
A financial service provider in Kuala Lumpur is seeking an offensive security specialist to conduct penetration tests, identify vulnerabilities, and document results. The role involves developing risk ratings and consulting on remediation strategies while collaborating with central teams to improve overall security posture. Applicants should have a degree in IT Security or Computer Science and experience in penetration testing and red teaming.
As part of the Kuala Lumpur based Offensive Security team, you will be responsible for planning, conducting penetration tests across Commerzbank Group, documenting the results and providing advisory on the closure of identified findings. Operating primarily remotely, the role focuses on identifying vulnerabilities in IT infrastructure and applications ensuring proactive risk mitigation and compliance with internal and external security standards.
In your role, you will closely collaborate with central teams in Commerzbank to strengthen the bank’s overall security posture.
As a specialist of offensive security, you’re testing IT applications and infrastructure of the bank for vulnerabilities and simulate attacks.
Responsible for the full process of those threat analyses, from planning to execution up to reporting. It’s part of those lifecycles to develop targeted techniques and exploits.
Based on the technical vulnerabilities and respective business processes you do develop risk ratings as well as risk mitigation strategies.
Analysis of product, protocols and cryptographic implementation are part of the job profile.
Completed university degree of IT Security, Computer Science or comparable qualification.
Sound experience in the areas Penetration Testing and Red Teaming.
Very good knowledge in operation systems, network and cloud technologies.
Good level of understanding in at least two scripting or programming languages.
Extensive experience in finding and exploiting vulnerabilities as well profound understanding of cryptographic primitives and concepts.
Fluent written and spoken English, especially when it comes to technical terms.
Ability to constantly learn as well as willing to travel.
Pronounced ability to work in a team and high flexibility.
* The salary benchmark is based on the target salaries of market leaders in their relevant sectors. It is intended to serve as a guide to help Premium Members assess open positions and to help in salary negotiations. The salary benchmark is not provided directly by the company, which could be significantly higher or lower.