Senior Offensive Security Consultant

TL;DR

Senior Offensive Security Consultant (Pentesting/Red Teaming): Deliver offensive security services across penetration testing, red team assessments, and continuous/point-in-time engagements with an accent on translating client cyber challenges into actionable resilience workstreams and producing findings for technical and executive audiences. Focus on complex testing across web, API, internal networks/Active Directory, cloud (AWS/Azure/GCP), and threat intelligence-driven attack simulation while also supporting commercial efforts and mentoring.

Location: Kuala Lumpur, Malaysia (permission to work in Malaysia required by the start of employment)

Company

hirify.global provides offensive security services and cyber resilience engagements.

What you will do

• Engage with clients to understand cyber security challenges and map them to hirify.global’s offensive security service offering.
• Lead proposal writing and presentations, including delivery timelines, resourcing needs, and pricing.
• Run penetration testing across external infrastructure, web applications, APIs, internal networks/Active Directory, mobile apps, and cloud assessments/configuration reviews.
• Support and deliver red team assessments (including end-to-end, breaching the perimeter, assumed breach, and bespoke scenarios).
• Deliver findings via written reports, presentations, and verbal briefings; support development and delivery of client training (e.g., phishing/awareness).
• Provide oversight, shadowing, and knowledge sharing; support line management and maintain standards, tools, and knowledge.

Requirements

• 8+ years of experience in pentesting and offensive security consulting across multiple areas (web/API testing, internal network/Active Directory, external infrastructure/VA, and cloud on AWS/Azure/GCP).
• Strong client-facing skills including report writing, briefings, and general communications.
• Experience mentoring or line managing more junior team members.
• Permission to work in Malaysia required by the start of employment.

Nice to have

• AI security testing experience.
• Red team assessments experience with familiarity with modern detection/evasion techniques.

Culture & Benefits

• Hybrid working and flexible working hours.
• 20 days holiday per year plus bank holidays (increases by 1 day per year of service up to 25 total).
• EPF contributions (12% employer / 11% employee) and life insurance (4x annual salary).
• Private dental and medical insurance for you and your family, plus an EAP programme.
• Parental support including fertility treatment leave, maternity leave, and paternity leave.
• Free access to a mindfulness app.

Hiring process

• Submit a PDF cover letter and CV.
• Interviews to assess offensive security delivery, client engagement, and leadership/mentoring experience.