VAPT Engineer

8-10 Years

Job Description

Bachelor's degree in Computer Science, Information Technology, Engineering, Cybersecurity, or equivalent.
Minimum 8 years of working experience in ICT, including at least 5 years in cybersecurity.
Minimum 3 years of hands-on experience in VAPT delivery as a tester, team lead, or technical reviewer.
Minimum 3 years of experience managing security assessment projects and third-party service providers.
Proven ability to manage multiple concurrent security testing engagements in a large, complex organisation.
Working knowledge of VAPT methodologies and standards, including OWASP Top 10 and Testing Guide, PTES, NIST SP 800-115, CVSS, and MITRE ATT&CK.
Working knowledge of ISO/IEC 27001, NIST CSF, Malaysia Cyber Security Act 2024, and PDPA 2010.
Proficient in written and spoken Bahasa Malaysia and English, with the ability to produce management-grade reports.