Loading...
Loading...
Join Malaysia's offensive security team. Real engagements against banks and fintechs, certifications paid in full, and senior consultants who review your work instead of reselling it.
Salary bands are published up front. If you clear the practical challenge, the band is the band — no negotiating down.
Learn and assist in penetration testing engagements while shadowing senior consultants.
Support the SOC team in triaging alerts, monitoring dashboards, and assisting in incident response.
Lead complex penetration testing engagements for financial institutions and enterprises.
Execute sophisticated adversary simulations and develop custom attack tooling.
Help clients implement security frameworks and achieve compliance goals.
Assess iOS and Android applications for banking and fintech clients.
Join the offensive security or compliance delivery team for a structured 3–6 month internship.
Send a CV with one page on something you have broken — a CTF chain, a bounty writeup, a tool you wrote. We read those first.
We invest in our people because the best security work comes from professionals who are still learning. Four things we hold to.
Full sponsorship for OSCP, CREST and other certifications, including exam fees and study materials.
Dedicated time and support for bug bounty hunting. You keep 100% of your bounty earnings.
Attend top security conferences — Black Hat, DEF CON and regional events — with full sponsorship.
MacBook Pro, high-spec testing rigs and all the tooling you need to do your best work.
Comprehensive medical coverage for you and your family, plus gym membership subsidies.
Hybrid arrangements with flexibility for remote work when you are not on a client engagement.
Four steps, roughly two to three weeks end to end. You will know where you stand after every one.
Send a CV plus one page on something you have broken. No cover letter needed.
A 30-minute call on your experience and how you approach an unfamiliar target.
A hands-on security challenge in your own time — the part that actually decides it.
Meet the delivery team, talk culture and career path, and get the offer or a clear no.

A CV, plus one page on a chain you built, a bounty you reported or a tool you wrote. The delivery team reads applications directly — expect a reply either way.
[email protected] · Subang Jaya, Selangor · Hybrid
Four things. Nothing else is required — no cover letter, no portfolio site.
One or two pages. Roles, scopes you have tested, tooling you know.
A CTF chain, a bounty writeup, a tool you wrote, a lab you built.
What you hold and what you are studying for — we will sponsor the next one.
Notice period and earliest start. Say if you need visa sponsorship.