L3 Security Professional

Job Purpose
As a Security L3 Professional specializing in Red Team Advisory, you will be a key player in our cybersecurity defense strategy, responsible for simulating advanced cyberattacks to identify and mitigate vulnerabilities within our organization. You will collaborate with various stakeholders to strengthen our security posture, ensuring our systems and data are well-protected against sophisticated threats.

Job Summary / Key Responsibilities
• Lead and conduct Red Team exercises, including penetration testing, ethical hacking, and advanced attack simulations to assess the security of our systems, networks, and applications.
• Develop and execute threat models to identify potential attack vectors, risks, and vulnerabilities across the enterprise.
• Conduct in-depth security assessments and vulnerability analysis of IT infrastructure, applications, and processes.
• Provide expert advice and recommendations to stakeholders on security improvements, risk mitigation strategies, and best practices based on Red Team findings.
• Collaborate with the incident response team durinq and after Red Team exercises to provide insights, assist in forensics, and help develop remediation plans.
• Develop and maintain custom tools and scripts to automate Red Team operations and improve testing efficiency.
• Create detailed reports of Red Team activities, findings, and remediation recommendations. Present results to technical teams and senior management
• Stay current with the latest security trends, threat landscapes, and Red Team methodologies. Contribute to the continuous improvement of the Red Team's tools, techniques, and procedures.
• Work closely with Blue Team (defensive security) to ensure comprehensive
• coverage of all security aspects and to share knowledge on emerging threats and mitigation strategies.
Academic qualifications & professional certificates
• Bachelor’s degree in information security or related Computer Science Degrees
• Professional certifications such from ISC2, ISACA, or GIAC are highly desirable, reflecting your commitment to ongoing professional development.

Experience
5-7 years of progressive experience in cybersecurity with at least 3 years in Red Team operations.

Knowledge & Skills
• Good analytical and problem-solving skills.
• Excellent communication and reporting skills, capable of conveying complex technical information to non-technical stakeholders.
• Strong understanding of network protocols, operating systems (Windows, Linux), and cloud environments.
• Familiarity with security tools such as SIEM, IDS/IPS, and endpoint protection solutions is a plus.
• Deep knowledge of attack techniques, including social engineering, phishing, and malware deployment.
• Experience with scripting language, including (e.g., Python, PowerShell).
• Good analytical and problem-solving skills.
• Knowledge of security standards and frameworks (e.g., NITRE ATT6CK, NIST, ISO 27001).
• Proficient in English and Bahasa Melayu. Skill in oral and written communications to exchange information, explain procedures, techniques, and answer questions in a clear logical manner.
• Must be result oriented and demonstrate a “Can Do” attitude — Adapt, Flexible 6 Resourceful.
• Ability to work in a rapidly changing, high growth environment.
• Must be able to deal with sensitive information, safely and securely.

Lavu Tech Solutions Sdn Bhd is a Product based company based in Malaysia since 2009. LTS provide e-commerece mobile platform for clients uses the ready-made solution.