Erudite Innovation Hiring! Full Time IT Security Tester - Banking in Selangor, Earn up to MYR 12,650.9 - Ricebowl

Job Summary

Responsible for conducting security testing and security assessments of banking applications, APIs, infrastructure and technology platforms. The role identifies security vulnerabilities, validates security controls and ensures applications meet the bank's cybersecurity, risk, compliance and regulatory requirements before production deployment.

Key Responsibilities

• Develop and execute Security Test Plans, Test Scenarios and Test Cases.
• Perform security testing throughout the SDLC.
• Conduct security testing for:
• Web applications
• Mobile banking applications
• APIs
• Backend systems
• Databases
• Network infrastructure
• Cloud environments
• Perform Application Security Testing based on OWASP principles.
• Test authentication and authorisation mechanisms.
• Validate:
• User access controls
• Role-based access control
• Session management
• Password policies
• MFA
• Privilege management
• Perform API security testing covering authentication, authorisation, input validation and data exposure.
• Identify common security vulnerabilities and weaknesses.
• Conduct vulnerability assessment and validate security findings.
• Support authorised penetration testing activities.
• Perform security regression testing following application changes.
• Review application security requirements and ensure appropriate security test coverage.
• Validate security controls against defined security requirements.
• Work closely with Cybersecurity, Developers, Solution Architects, Infrastructure, Network and QA teams.
• Analyse security defects and determine their severity and business impact.
• Log and track security vulnerabilities through remediation and closure.
• Participate in security defect triage meetings.
• Perform vulnerability retesting after remediation.
• Prepare security testing reports and dashboards.
• Provide recommendations to development teams for resolving security vulnerabilities.
• Support SIT, UAT and Go-Live security readiness assessments.
• Ensure security testing evidence is properly documented for audit purposes.
• Ensure testing activities comply with the bank's security policies, risk framework and regulatory requirements.

Banking Applications / Systems

Experience testing:

• Core Banking
• Internet Banking
• Mobile Banking
• Digital Banking
• Payment Systems
• Payment Gateways
• Cards
• ATM applications
• Loans / Financing
• Customer Onboarding
• AML / KYC
• Fraud Management
• E-Invoicing
• API / Microservices
• Corporate Banking
• Regulatory Applications

Security Testing Types

• Web Application Security Testing
• Mobile Application Security Testing
• API Security Testing
• Vulnerability Assessment
• Security Regression Testing
• Authentication Testing
• Authorisation Testing
• Access Control Testing
• Session Management Testing
• Configuration Security Testing
• Encryption / Data Protection Testing
• Penetration Testing support
• Secure SDLC Testing

Tools & Technologies

Security Testing

• Burp Suite
• OWASP ZAP
• Nessus
• OpenVAS
• Nmap
• Metasploit

API

• Postman
• Swagger / OpenAPI

Network / Monitoring

• Wireshark
• Splunk
• SIEM platforms

Operating Systems

• Linux / Unix
• Windows

Required Skills & Experience

• Bachelor's Degree in Cybersecurity, Computer Science, Information Technology or related field.
• 3–8+ years of experience in Security Testing / Application Security / Cybersecurity QA.
• Strong hands-on experience with application security testing.
• Good understanding of OWASP Top 10.
• Experience testing REST/SOAP APIs.
• Good understanding of authentication, authorisation, encryption and session management.
• Experience with vulnerability assessment and security testing tools.
• Basic scripting knowledge in Python, Bash, PowerShell or similar is beneficial.
• Good understanding of networking, HTTP/HTTPS, TCP/IP and databases.
• Experience working with Agile / DevOps teams.
• Banking or financial-services experience is highly preferred.
• Strong analytical, troubleshooting and reporting skills.

Preferred Certifications

• ISTQB Security Tester
• CEH
• OSCP
• Security+
• CISSP
• CISM
• GWAPT
• OSWE

Key Deliverables

• Security Test Strategy
• Security Test Plan
• Security Test Cases
• Vulnerability Assessment Report
• Security Test Execution Report
• Security Defect Report
• Vulnerability Risk Assessment
• Remediation Tracking Report
• Security Retest Report
• Go-Live Security Readiness Report

Pay: RM4,239.82 - RM12,650.87 per month

Benefits:

• Health insurance
• Maternity leave
• Opportunities for promotion
• Professional development

Work Location: In person