Penetration Testing Roles - Kuala Lumpur

About the opportunity

Flare Consulting is hiring three penetration testers for our client, a leading global cybersecurity and assurance consultancy, to expand its established Kuala Lumpur testing team.

The team delivers hands-on security testing for clients across Asia, the Middle East and Europe. You will join a growing team of specialist consultants with real technical variety and a clear path into leadership.

Role

Openings

Experience

Senior Security Consultant 2

4+ years hands-on penetration testing

Lead Security Consultant 1

6+ years, including leading engagements and mentoring

Location: Kuala Lumpur, Malaysia (hybrid). Employment type: permanent, full-time.

Role 1: Senior Security Consultant (Penetration Testing) – 2 openings

You will independently deliver complex security engagements, owning the technical testing, reporting and client communication with a high degree of autonomy.

Key responsibilities

• Perform hands-on penetration testing across infrastructure, cloud platforms, mobile applications, web applications and APIs.
• Manage day-to-day client communication during engagements, from kick-off and testing updates to reporting and technical debriefs.
• Deliver accurate, well-evidenced assessments and reports with minimal supervision.
• Give practical, risk-based security advice, explaining findings and remediation to technical and non-technical stakeholders.
• Independently deliver small to medium engagements, and support larger projects under Lead or Principal consultants.
• Guide and informally mentor junior consultants, reviewing their work where appropriate.
• Contribute to testing methodologies, tooling, technical documentation and knowledge sharing.
• Support presales and scoping with technical input and effort estimates.

What you bring

• At least 4 years of hands-on penetration testing experience.
• Strong testing depth across mobile applications, infrastructure and cloud platforms.
• Practical cloud security assessment experience; Oracle Cloud Infrastructure (OCI) is highly valued, with exposure to AWS, Azure or GCP.
• Security configuration and benchmarking assessments against CIS or STIG benchmarks, vendor baselines and industry good practice.
• A track record of supporting and developing less-experienced consultants.
• Excellent written and spoken English, with the ability to explain complex findings clearly.
• Able to work independently and as part of a high-performing team.

Advantageous (capability matters more than certifications)

• BSc in a relevant technical discipline, or equivalent experience.
• CREST CRT or CCT.
• Offensive Security certifications such as OSCP, OSEP or OSWP.
• Cloud security certifications such as OCI Security Professional or Azure AZ-500.
• Broader certifications such as CISSP or CCSP.

Role 2: Lead Security Consultant (Penetration Testing) – 1 opening

You will lead and deliver technically demanding engagements from planning to final delivery, while guiding consultants and raising the team's technical standards.

Key responsibilities

• Manage end-to-end delivery of security engagements, including kick-off calls, testing, reporting and client debriefs.
• Produce high-quality, accurate reports and peer-review the team's work to maintain consistent delivery standards.
• Build consultative client relationships, give practical security advice and support scoping.
• Lead small to medium projects, coordinate consultants, and support delivery of larger, complex engagements.
• Mentor junior consultants and improve team processes and delivery practices.
• Support presales by scoping engagements and advising on security concerns and testing methodology.
• Drive development of internal tooling, methodologies and technical guidance, acting as a technical point of contact for clients and colleagues.

What you bring

There is no single perfect profile. Strong candidates will show some or most of the following:

• At least 6 years of hands-on penetration testing experience.
• Strong testing depth across mobile applications, infrastructure and cloud platforms.
• Practical cloud security assessment experience; Oracle Cloud Infrastructure (OCI) is highly valued, with exposure to AWS, Azure or GCP.
• Security configuration and benchmarking assessments against CIS or STIG benchmarks, vendor baselines and industry good practice.
• A proven record of mentoring and developing less-experienced consultants.
• Excellent written and spoken English, with the ability to lead, teach, present and inspire.
• Able to work independently and as part of a high-performing team.

Advantageous (capability matters more than certifications)

• BSc in a relevant technical discipline, or equivalent experience.
• CREST CRT or CCT.
• Offensive Security certifications such as OSCP, OSEP or OSWP.
• Cloud security certifications such as OCI Security Professional or Azure AZ-500.
• Broader certifications such as CISSP or CCSP.

Working arrangements and how to apply

Both roles are hybrid and shift-based, open only to candidates currently resident in Malaysia.

• Hours: five standard weekdays, aligned to Malaysian, Middle East (KSA) or UK business hours depending on team allocation.
• Shift allowance: a generous allowance on top of base salary for non-standard hours.
• Location: remote work supported anywhere in Malaysia, with time at client sites and the Kuala Lumpur office as needed.
• Package: competitive market salary, comprehensive benefits, professional development and a collaborative global team.
• Eligibility: applicants must be resident in Malaysia. Successful candidates will complete standard pre-employment checks.

How to apply

• Send your CV to Vineet@flare-consult.com or message Vineet Goindi on LinkedIn, quoting the role title. All applications are handled in strict confidence, and the client's name will be shared with shortlisted candidates.