Resident Engineer - VAPT
# Resident Engineer - VAPT **Ikigaienablers** · Kuala Lumpur · `On-site` 🕒 **Статус:** *Опубликовано: сегодня* · *Источник: Indeed* --- ### About the Role Job Title : Resident Engineer – VAPT Location Bangsar South, Kuala Lumpur Job Summary Looking for a Resident Engineer – VAPT to support our client, in managing and governing the organisation's enterprise-wide Vulnerability Assessment and Penetration Testing (VAPT) programme. The successful candidate will act as the central coordination point between internal stakeholders, system/application owners, security teams and appointed VAPT service providers. The role requires strong technical VAPT knowledge combined with programme coordination, security assessment governance, vendor management, remediation tracking and management reporting. Key Responsibilities - Plan and manage the annual VAPT programme and testing calendar covering IT, cloud, applications, networks and other enterprise assets. - Coordinate VAPT requests, scope definition, Rules of Engagement and testing authorisations. - Ensure pre-test readiness, including test environments, access, rollback procedures and safe-testing controls. - Coordinate multiple VAPT engagements and appointed security testing vendors. - Review VAPT reports for technical accuracy, evidence, risk ratings, false positives and completeness. - Maintain the central VAPT findings and remediation register. - Track remediation against agreed severity-based SLAs and coordinate retesting and closure. - Manage risk acceptance and security exceptions where required. - Prepare monthly VAPT programme reports and quarterly management dashboards covering KPIs, trends, risks and recurring findings. - Maintain appropriate audit and regulatory evidence. - Manage VAPT service providers, contracted deliverables and service quality. - Continuously improve VAPT policies, methodologies, templates, SOPs and governance processes. - Provide technical guidance to internal stakeholders and challenge VAPT findings where necessary. - Support approved testing windows and critical security findings outside normal working hours when required. Required Qualifications & Experience - Bachelor's degree in Computer Science, Information Technology, Engineering, Cyber Security or a related field . - Minimum 8 years of ICT experience . - Minimum 5 years of Cyber Security experience . - Minimum 3 years of hands-on VAPT experience as a VAPT tester, team lead or technical reviewer. - Minimum 3 years of experience managing security assessment projects and third-party security/VAPT service providers . - Experience managing multiple concurrent security testing engagements within a large and complex organisation. - Strong knowledge of VAPT methodologies including: - OWASP Top 10 / OWASP Testing Guide - PTES - NIST SP 800-115 - CVSS - MITRE ATT&CK - Knowledge of ISO 27001, NIST CSF, Malaysia Cyber Security Act 2024 and PDPA 2010 . - Strong experience in VAPT report review, remediation tracking, risk assessment and retesting. - Excellent stakeholder management and management-level reporting skills. . Mandatory Certification Candidate must hold at least one of the following: - CISSP - CISM - CISA - OSCP - GPEN - GWAPT - GXPN - CREST CRT / CCT - CEH (Practical preferred) Preferred / Added Advantage - PMP or PRINCE2 Practitioner. - ISO 27001 Lead Implementer / Lead Auditor. - GICSP or IEC 62443 Cyber Security certification. - Experience in utilities, energy, oil & gas or CNII environments. - Experience with OT/ICS environments , including SCADA, DCS, PLC or RTU. - Experience working with security constraints around live/production control systems. - Banking/BFSI or other highly regulated industry experience. Pay: RM4,000.00 - RM12,000.00 per month Benefits: - Additional leave - Health insurance - Opportunities for promotion - Parental leave - Professional development Application Question(s): - Citizen of Malaysia - How many years of hands-on VAPT/Penetration Testing experience do you have? - Which VAPT certification do you currently hold? - CISSP - CISM - CISA - OSCP - GPEN - GWAPT - GXPN - CREST CRT/CCT - CEH - None - Willing to apply for 1 year extended contract through agency payroll - Budget for the given role would be RM 12,000, mention your current and expected salary - Will be able to join immediately or in max 30 days notice Work Location: In person
Наблюдалась 2026-10-07, впервые 2026-10-06, источник — Indeed.