Penetration tester
Summary
Conducts penetration tests on applications, networks, and IT infrastructure for Hytech, a consulting firm serving fintech and financial-services clients — developing test plans, running vulnerability scans and attack simulations, and recommending remediations. Core tooling includes Metasploit, Burp Suite, Nmap, Python/Bash scripting, and cloud security assessment on AWS, Azure, and GCP.
About Hytech
Hytech is a leading management consulting firm headquartered in Australia and Singapore, specialising in digital transformation for fintech and financial services organisations. We deliver end-to-end consulting services and provide robust middle- and back-office solutions that enable our clients to optimise operations, enhance efficiency, and stay ahead in a fast-evolving digital landscape.
With more than 2,000 professionals worldwide, Hytech has a strong and growing international presence, with offices across Australia, Singapore, Malaysia, Taiwan, the Philippines, Thailand, Morocco, Cyprus, Dubai, and beyond.
Job Responsbility
- Conduct in-depth penetration tests on applications, network systems, and IT infrastructure.
- Develop and execute test plans, including vulnerability scanning, exploit research, and attack simulations.
- Identify and document security vulnerabilities, offering guidance and recommendations for remediation.
- Collaborate with the cybersecurity team to simulate realistic attack scenarios to evaluate the resilience of our systems.
- Stay current on new security threats, technologies, and techniques, applying them to improve testing strategies.
- Assist in developing and refining security policies and best practices to improve the company's overall security stance.
What we are looking for
- Minimum Diploma in Computer Science, Information Security, or a related field. Relevant certifications are a plus (e.g., OSCP, CEH, CISSP).
- At least 2 years experience in penetration testing or a similar role in cybersecurity.
- Strong understanding of network protocols, application security, and operating systems.
- Proficiency with penetration testing tools (e.g., Metasploit, Burp Suite, Nmap).
- Experience with scripting languages (Python, Bash, etc.) and security frameworks.
- Excellent problem-solving skills with attention to detail.
- Familiarity with compliance and regulatory standards (e.g., GDPR, HIPAA, PCI-DSS).
- Hands-on experience with cloud platforms (AWS, Azure, Google Cloud) security assessments.
- Excellent command of English and Chinese in order to coordinate and handle queries from Chinese speaking counterparts.
What We Offer
- Easy access to public transportation (LRT & KTM).
- Transportation allowance.
- Corporate insurance coverage, including dental, optical, and outpatient claims.
- Gym and fitness claims.
- Ongoing training and development opportunities.
- Exposure to exciting projects that support career growth and professional development.