Deskripsi Pekerjaan
Are you a seasoned cybersecurity professional looking for a challenging role in a leading financial institution? Hong Leong Bank is seeking a highly skilled VAPT Senior Executive to safeguard our digital assets and critical infrastructure.
In this pivotal role, you will lead vulnerability assessment and penetration testing initiatives, ensuring our banking systems remain resilient against evolving cyber threats. You will work closely with technical teams to identify security gaps and implement robust mitigation strategies. This is an excellent opportunity to drive security excellence within a dynamic corporate environment.
We are looking for a proactive individual who thrives in a high-pressure environment and possesses a deep understanding of application and network security protocols. If you are passionate about cybersecurity and want to make a significant impact on the financial sector, we want to hear from you.
Tanggung Jawab
- Conduct comprehensive Vulnerability Assessment and Penetration Testing (VAPT) on web applications, networks, and systems.
- Analyze security vulnerabilities and provide actionable remediation plans to development teams.
- Perform security code reviews and static/dynamic application security testing (SAST/DAST).
- Report findings to management and stakeholders, including executive summaries and technical details.
- Stay updated on the latest security trends, hacking techniques, and industry regulations (e.g., GDPR, PCI-DSS).
- Conduct security awareness training and collaborate with internal IT teams on incident response.
- Assist in the development of security policies and compliance frameworks.
Kualifikasi
- Bachelor’s Degree in Computer Science, Information Technology, Cybersecurity, or related field.
- Minimum of 3-5 years of experience in VAPT, Penetration Testing, or Application Security.
- Certifications such as CEH, OSCP, CISSP, CISM, or CompTIA Security+ are highly preferred.
- Strong knowledge of OWASP Top 10, common web vulnerabilities (SQLi, XSS, CSRF), and network protocols.
- Familiarity with security testing tools (e.g., Burp Suite, Metasploit, Nessus, Wireshark).
- Excellent analytical and problem-solving skills with strong written communication abilities.
- Ability to work independently and manage multiple projects simultaneously.