Lead - Offensive Security
2 days ago
**Roles & Responsibilities**:
- Leading the offensive security teams including Red Teaming, Penetration Testing etc., improving the teams capabilities, interacting with organizations, and advising on their security programs, maturity, and outcomes of the red team services as well as coaching and leading the team members on their assignments, development and growth, etc.
- Should have a goal to further mature the red teaming capabilities (types of services, way of delivery, automation and customization required per environment etc.), youll keep on top of the constant changing knowledge of threat actors tactics, techniques, and procedures to bring realistic and meaningful solutions to clients.
- Working with cyber security teams, blue teams, and other technology stakeholders of the organization to help them utilize your findings and outcomes of your offensive activities to better defend and mature their security stance.
**Requirements**:
- Hands on mentality, with experience in red teaming and ethical hacking from technical skills to soft skills
- Red team experience and mindset: creating red team attack scenarios, weakest entry point, creative approach, multiple methods testing, stealthy approach, pivoting, social engineering, phishing and physical security and anything involving the human element.
- Experience with various technologies and comfortable to picking up more (OS / tools / development languages / online technologies etc.)
- Ability to stay on top of the fast-changing mindset of red teaming TTPs and tools that go with it to offer successful red team services.
- Leadership and teamwork mentality, as youll work closely with colleagues on projects, mentor and help them develop.
- Understand the defensive side, blue team, Security Operations Center (SOC), and security monitoring and response (SIEM, IDS/IPS etc), as well as EDR (e.g. for bypasses), overall monitoring, detection and indicators of compromise, and creating effective red team activities to test these (e.g. developing / using malware, pivoting, escalating privileges, staying stealthy etc).
- Good communication skills and ability to work with all stakeholders, internal and external, finding, advising, and implementing the best solutions.
- Curiosity, problem solving mentality.
- Good to have certifications - OSCP, OSCE, SANS, GWAPT.
-
Senior Offensive Security Engineer
2 days ago
Greater Kuala Lumpur, Malaysia BTI Executive Search Full time 90,000 - 120,000 per yearKey ResponsibilitiesPerform hands-on penetration testing across a wide array of targets—including web applications, mobile apps (iOS/Android), APIsDesign and execute sophisticated attack scenarios that go beyond automated tools, using creative and manual techniques to find subtle and complex security gaps.Partner directly with development teams to explain...
-
Lead Security Engineer
2 weeks ago
Kuala Lumpur, Kuala Lumpur, Malaysia Agensi Pekerjaan RF HR Solutions Sdn Bhd Full time 120,000 - 180,000 per yearLead Security EngineerLocation: KLCC - HybridIndustry: Media/advertisingWe're partnering with our client to seek an experienced Lead Security Engineer to strengthen their cloud, application, and IT infrastructure security. The ideal candidate will have a strong blend of hands-on technical expertise and strategic leadership in both offensive and defensive...
-
Senior Penetration Testing Lead
2 days ago
Kuala Lumpur, Kuala Lumpur, Malaysia FIRMUS Full time 120,000 - 240,000 per yearRole DescriptionThe Senior Penetration Testing Lead is a technical leadership role responsible for steering and executing advanced offensive security engagements. This role requires a security practitioner capable of designing, managing, and delivering comprehensive security assessments—including penetration testing, red teaming, and application security...
-
Cyber Security Consultant
2 days ago
Kuala Lumpur, Kuala Lumpur, Malaysia Wizlynx Malaysia Sdn Bhd Full time 900,000 - 1,200,000 per yearKey RoleAs (Senior) Cyber Security Consultant & Penetration Tester, you will execute a variety of engagements, conducting advanced hands-on penetration testing beyond automated tool validation, which will focus on targets that may include network devices, servers, web and mobile apps, web APIs, wireless infrastructures, IoT devices, and other information...
-
IT Security Consultant
27 minutes ago
Kuala Lumpur, Malaysia Xtremax Pte. Ltd. Full time**Responsibilities** - Conduct security assessments such as penetration and vulnerability tests. - Perform Network Vulnerability Assessments and Penetration Testing. - Risk Evaluation of observed vulnerabilities based on common risk scoring techniques such as CVSS. - Perform Configuration Review to check compliance with Security Hardening baselines. - Keep...
-
Senior IT Security Engineer
2 days ago
Kuala Lumpur, Kuala Lumpur, Malaysia TechLab Security Sdn Bhd Full time 120,000 - 180,000 per yearJob SummaryWe are seeking an experienced Senior Cybersecurity Engineer to lead and manage daily Security Operations (SecOps) activities. The role involves hands-on management of endpoint security, firewalls, email security, and WAF, as well as leading cybersecurity enhancement projects across the organization.The ideal candidate is a technically strong and...
-
Senior Cyber Security Engineer
2 days ago
Kuala Lumpur, Kuala Lumpur, Malaysia Ørsted Full time 120,000 - 240,000 per yearApplication deadlineCountryMalaysiaLocationKuala LumpurWorkplaceHybrid (office and home-working)Working hours40Employment typePermanentLegal entityOrsted Serv Malaysia SdnWhy join?Proven very high employee satisfaction and motivationAttractive benefit package for you and your familyMY generous parental leave packageGenerous health insurance offerJoin us in...
-
Cybersecurity Operation Lead
1 week ago
Kuala Selangor, Malaysia Abhidi Solution Private Limited Full timeLead & Manage Security Operations (24x7) team, VAPT, and drive accountability for cyber security delivery - Influence and improve security process, oversee technical delivery and daily operational activities - To evaluate, design and recommend administrative and technical cybersecurity controls - Strong articulation skills to explain security solutions and...
-
Security Consultant
1 week ago
Kuala Lumpur, Malaysia LRQA group Full timeAbout LRQA At LRQA our focus has always been on excellence in cyber security. We have teams that offer world class services in red teaming, penetration testing, threat intelligence, research and development, detection and response, governance, risk, and compliance, and plenty more. Our business is global and so are our clients. We work closely with central...
-
Head of Security Operations
2 days ago
Kuala Lumpur, Kuala Lumpur, Malaysia Canonical - Jobs Full time 120,000 - 240,000 per yearThis global leadership role in cyber security is to manage the Security Operations (SecOps) team responsible for design, implementation and evolution of Canonical security practices, techniques, tools, systems and policies. The team is the primary owner of strategy and practices that determine how Canonical secures its data, internal infrastructure and build...