Penetration Tester

Location: Kuala Lumpur, Federal Territory of Kuala Lumpur, Malaysia

Workplace: on_site

Employment Type: full

Description

About Hytech

- Hytech is a leading management consulting firm headquartered in Australia and Singapore, specialising in digital transformation for fintech and financial services organisations.
- The company delivers end-to-end consulting services and provides robust middle- and back-office solutions to help clients optimise operations, enhance efficiency, and stay ahead in a fast-evolving digital landscape.
- With more than 2,000 professionals worldwide, Hytech has a strong and growing international presence, with offices across Australia, Singapore, Malaysia, Taiwan, the Philippines, Thailand, Morocco, Cyprus, Dubai, and beyond.

Job Responsibility

- Conduct in-depth penetration tests on applications, network systems, and IT infrastructure.
- Develop and execute test plans, including vulnerability scanning, exploit research, and attack simulations.
- Identify and document security vulnerabilities, offering guidance and recommendations for remediation.
- Collaborate with the cybersecurity team to simulate realistic attack scenarios to evaluate the resilience of systems.
- Stay current on new security threats, technologies, and techniques, applying them to improve testing strategies.
- Assist in developing and refining security policies and best practices to improve the company's overall security stance.

What We Are Looking For

- Minimum Diploma in Computer Science, Information Security, or a related field. Relevant certifications are a plus (e.g., OSCP, CEH, CISSP).
- At least 2 years of experience in penetration testing or a similar role in cybersecurity.
- Strong understanding of network protocols, application security, and operating systems.
- Proficiency with penetration testing tools (e.g., Metasploit, Burp Suite, Nmap).
- Experience with scripting languages (Python, Bash, etc.) and security frameworks.
- Excellent problem-solving skills with attention to detail.
- Familiarity with compliance and regulatory standards (e.g., GDPR, HIPAA, PCI-DSS).
- Hands-on experience with cloud platforms (AWS, Azure, Google Cloud) security assessments.
- Excellent command of English and Chinese to coordinate and handle queries from Chinese-speaking counterparts.

What We Offer

- Easy access to public transportation (LRT & KTM).
- Transportation allowance.
- Corporate insurance coverage, including dental, optical, and outpatient claims.
- Gym and fitness claims.
- Ongoing training and development opportunities.
- Exposure to exciting projects that support career growth and professional development.