Senior Security Specialist
On-siteShah Alam, Selangor, Malaysia
Job Summary
Lead vulnerability assessments across networks, applications, cloud environments, and infrastructure, providing clear, risk-based remediation guidance to stakeholders. Plan and execute advanced penetration testing activities across network, web, cloud, and infrastructure layers, delivering high-quality reports with prioritized recommendations. Monitor, investigate, and respond to security alerts and incidents, ensuring effective triage, containment, eradication, and root cause analysis while serving as an escalation point for complex events. Review, strengthen, and optimize security controls, including firewall policies, network segmentation, and endpoint hardening. Review, validate, and prioritize bug bounty submissions, partnering with researchers and engineering teams to remediate confirmed issues. Collaborate with IT, DevOps, Cloud, Risk, and Compliance teams to embed security best practices into development and operational workflows. Support security awareness initiatives and help strengthen security culture across the organization. Use AI-assisted tools and automation to improve security testing, triage, reporting, and repeatable workflows.
Required Qualifications
- Bachelor's degree, postgraduate diploma, or professional qualification in Computer Science, Information Security, IT, or a related field
- Minimum 5 years of hands-on experience in cybersecurity, ethical hacking, web application security, penetration testing, and IT/information security
- Industry certifications such as Security+, CEH, OSCP, eJPT, eWPT, GIAC, or similar
- Demonstrated leadership in team guidance, project ownership, and cross-functional influence for senior-level roles
- Strong experience with offensive and defensive security tools such as Burp Suite, Metasploit, Nessus, Qualys, Splunk, SIEM platforms, and similar tools
- Solid understanding of network protocols, web application security, OWASP Top 10, vulnerability analysis, and threat detection methodologies
- Hands-on experience with AWS security controls, IAM, networking, and Linux system administration
- Strong analytical, problem-solving, and independent working skills in a fast-paced environment
- Excellent communication and reporting skills, with the ability to explain technical risk to non-technical stakeholders
- Working knowledge of AI tools, AI-assisted security analysis, and automation using AI to improve security operations, triage, reporting, and detection workflows
- Willingness to work on-site in i-City Shah Alam
Desired Qualifications
- Equivalent practical experience is welcome
Hiring someone like this?
Get your role in front of qualified candidates on Sorce.