Senior Engineer - Offensive Security

Axonect Kuala Lumpur, Kuala Lumpur, Malaysia

IT Services and IT Consulting · 1,001-5,000 employees

6 d ago

Mid (2-5 yrs) Full-time Malaysia

Create a free account to apply — email only, no card. You can also save this posting or score it against your profile with AI.

Applying here? Try the free cover letter tool — paste this posting and your résumé, no account needed.

About the role

Plan and conduct comprehensive vulnerability assessments and penetration tests across diverse infrastructure and cloud environments. Collaborate with security teams to validate findings, provide remediation guidance, and strengthen the overall security posture.

What they look for

Vulnerability Assessment Penetration Testing Cloud Security Network Security Web Application Security API Security CrowdStrike Falcon Nessus Professional Burp Suite Kali Linux Security Configuration Risk Assessment Technical Documentation Problem-solving Communication Skills

Requirements

Requires 4+ years of experience in offensive security, penetration testing, or application security. Candidates must possess strong technical knowledge of security methodologies and hands-on experience with industry-standard security tools.

Full description

Key Responsibilities

Plan and conduct vulnerability assessments and penetration tests across infrastructure, applications, APIs, networks, and cloud environments
Identify, validate, and assess security vulnerabilities, misconfigurations, and potential exploitation paths
Perform security configuration and posture assessments of servers, operating systems, databases, and network devices
Prepare technical assessment reports detailing findings, risk ratings, and remediation recommendations
Support secure application deployments and validate security controls before production releases
Collaborate with security teams and system owners to verify remediation activities and improve security posture
Research emerging threats, attack techniques, and offensive security tools to strengthen security testing practices

Person Specifications

4+ years of relevant experience in offensive security, penetration testing, vulnerability assessment, or application security
Strong understanding of network, web application, API, infrastructure, and cloud security testing methodologies
Hands-on experience with tools such as CrowdStrike Falcon, Nessus Professional, Burp Suite, and Kali Linux
Ability to identify and validate vulnerabilities, assess risk, and provide practical remediation guidance
Knowledge of operating systems, databases, network devices, security configurations, and common attack techniques
Strong analytical, problem-solving, technical documentation, and communication skills
Relevant cybersecurity or penetration testing certifications are advantageous

Vendor submissions - 12 months