Penetration Tester
Summary
On-site penetration tester at Baker Tilly MH Consulting (part of Baker Tilly Malaysia) who plans and executes pen tests on web, mobile, and infrastructure systems, runs red team exercises, performs malware/exploit analysis, and writes technical reports for clients. A pen-testing certification such as CEH, OSCP, GPEN, or PenTest+ is mandatory.
Salary: RM 3,500 – RM 5,000 per month
About the job
Company Description Baker Tilly MH Consulting Sdn Bhd is part of Baker Tilly Malaysia and an independent member of Baker Tilly International, a global network of accounting and business advisory firms operating in 147 territories with 50,400 professionals. The network generates combined worldwide revenue of US$6.8 billion, reflecting its scale and market presence. Baker Tilly is recognized as a leading advisory, tax, and assurance firm that supports clients in navigating complex and changing business environments. Team members benefit from access to international resources, diverse clients, and specialized expertise. For more information, candidates can visit www.bakertilly.my
Role Description This is a full-time, on-site Cybersecurity Penetration Tester role based in the Federal Territory of Kuala Lumpur, Malaysia. The role involves planning and executing penetration tests on web, mobile, and infrastructure systems to identify vulnerabilities and assess security controls. The Penetration Tester will perform security assessments, document findings, and develop clear remediation recommendations for clients and internal stakeholders. Day-to-day tasks include conducting red team exercises, researching emerging threats, performing malware and exploit analysis, and validating the effectiveness of security measures. The role also requires preparing detailed technical reports, presenting results in a non-technical manner to business audiences, and collaborating with other cybersecurity and advisory team members to strengthen client security posture.
Mandatory Certification Requirement
Applicants must possess at least one of the following certifications or qualifications:
• Certified Ethical Hacker (CEH)
• CREST Certified Red Team Specialist (CCRTS)
• CompTIA PenTest+
• GIAC Penetration Tester Certification (GPEN)
• CREST Penetration Tester
• Offensive Security Certified Professional (OSCP)
• Mile2 Certified Penetration Testing Engineer (CPTE)
• Rocheston Certified Cybersecurity Engineer (RCCE)
• MITRE ATT&CK Penetration Testing Service
• Global ACE Certified Penetration Tester (CPT)
• Certified Cloud Penetration Tester (CCPT)
General
Strong analytical and problem-solving abilities, attention to detail, and a commitment to ethical security testing practices.
Ability to work collaboratively in a consulting environment and manage multiple engagements and deadlines.
If you are interested in applying, please send your resume to susie.tiong@bakertilly.my.