Penetration Tester

Company Description MAYASEVEN CO., LTD., originally founded in 2012, specializes in in-depth hacking and high-quality penetration testing services. The company is committed to improving information security in Thailand and the broader Southeast Asia region through both professional services and community education. In 2017, MAYASEVEN became MAYASEVEN CO., LTD. to align services with international standards and subsequently achieved ISO 9001:2015 certification, demonstrating its focus on quality and consistency. With expansion to Singapore as MAYASEVEN PTE. LTD., the company continues to grow as a trusted cybersecurity partner across Southeast Asia.
Role Description This is a full-time, on-site Penetration Tester role based in Bangkok City, Thailand. The Penetration Tester will plan and conduct security assessments, including network, web application, and infrastructure penetration tests, to identify vulnerabilities and validate security controls. Responsibilities include preparing detailed technical reports, documenting findings, and recommending remediation strategies to clients and internal teams. The role involves collaborating with cybersecurity professionals on red teaming exercises, researching emerging threats, and contributing to the continuous improvement of testing methodologies and tools. The Penetration Tester will also participate in knowledge sharing, internal training, and, when required, client-facing presentations or workshops.
Qualifications

• Candidates should possess strong skills in Application Security and Cybersecurity, including secure design, vulnerability identification, and risk assessment.
• Candidates should possess skills in Reverse Engineering and Malware Analysis to dissect binaries, analyze malicious code, and understand exploit behavior.
• Candidates should possess skills related to Red Teaming, including adversary simulation, lateral movement, and post-exploitation techniques.
• Hands-on experience with common penetration testing tools and frameworks (e.g., Burp Suite, Metasploit, Nmap, Wireshark, Kali Linux or similar distributions).
• Solid understanding of network protocols, operating systems (Windows, Linux), and secure configuration best practices.
• Relevant certifications such as OSCP, OSCE, GPEN, CEH, or equivalent practical experience are highly beneficial.
• Ability to clearly document technical findings and communicate complex security issues to both technical and non-technical stakeholders.
• Bachelor’s degree in Computer Science, Information Security, or a related field, or comparable professional experience.
• Strong problem-solving attitude, attention to detail, and willingness to continuously learn about new attack techniques and defenses.