Penetration Tester & Offensive Security Specialist
HybridKuala Lumpur, Kuala Lumpur, Malaysia
Job Summary
Execute penetration tests across traditional web applications, cloud infrastructure, and datacenter environments to identify vulnerabilities and validate defenses. Leverage offensive security expertise to probe hybrid-cloud setups (Azure, AWS, OCI) and assess resilience within Operational Technology and automated physical logistics systems. Utilize industry-standard toolsets and custom scripting to verify exploits, then document findings as prioritized remediation steps for engineering teams. This role requires hands-on technical ingenuity over corporate tenure, with a focus on securing core digital applications and industrial attack surfaces.
Required Qualifications
- Proven technical prowess and practical experience in offensive security, ethical hacking, or vulnerability research
- Strong hands-on experience performing penetration testing across enterprise web applications, APIs, and hybrid-cloud environments (Azure, AWS, or OCI)
- Solid understanding of internal and external network exploitation methodologies, lateral movement, and common infrastructure vulnerabilities
- Proficient in using industry-standard offensive toolsets (e.g., Burp Suite, Metasploit, Nmap, Kali Linux)
- Ability to write custom scripts (e.g., Python, Bash, Go) for exploit verification
- Full English fluency both spoken and written
- Excellent technical documentation skills with the ability to clearly translate exploit proofs-of-concept into prioritized, actionable remediation steps for developers and systems engineers
- Must be hands-on to proactively identify vulnerabilities and validate defenses across global technology landscape
- Possesses technical prowess or a strong interest in Operational Technology (OT), hardware hacking, or automated systems
- Deep curiosity and a strong technical grasp of physical attack surfaces or industrial constraints
Desired Qualifications
- Direct experience with hardware debugging interfaces (e.g., UART, JTAG)
- Experience with firmware extraction
- Testing industrial/OT networks
- Relevant hands-on certifications (e.g., OSCP, OSWE, EWPTX, or equivalent practical achievements)
Hiring someone like this?
Get your role in front of qualified candidates on Sorce.