Course Details
Course Details
What You'll Learn
Topic 1: Planning and Scoping
Topic 2: Information Gathering and Vulnerability Scanning
Topic 3: Attacks and Exploits
Topic 4: Reporting and Communication
Topic 5: Tools and Code Analysis
Course Info
Minimum Entry Requirement
Knowledge and Skills
- Able to operate using computer functions
Attitude
- Positive Learning Attitude
- Enthusiastic Learner
Minimum Software/Hardware Requirement
Software:
You will need the following for this course:
- Oracle VirtualBox – free
- Kali Linux – free, installed as a virtual machine
Hardware: Windows PC or Mac laptop
How to Apply HRD Corp Funding
This course is HRD Corp claimable for employers registered with HRD Corp, under the HRD Corp Claimable Courses scheme (SBL-Khas). Your company applies for the grant before the class; we submit the training provider claim after it.
- Check your levy balance - your company must be registered with HRD Corp and have enough levy balance to cover the course fee.
- Request a quotation - contact us for the quotation, course content and trainer profile; you attach these to the grant application.
- Apply for the grant in eTRiS before the class - log in to your employer eTRiS account, go to Application > Grant > Apply Grant, choose the scheme HRD Corp Claimable Courses (SBL-Khas), select us as the training provider and this course, add your trainees, attach the quotation, course content and trainer profile, and submit.
- Submit in time - for public classes, submit at least 3 calendar days before the class (15 June to 31 December 2026) and at least 14 days before from 1 January 2027; in-house classes need 14 days. The training must start within 90 days of that advance submission period.
- Send us the grant approval - once HRD Corp approves the application, email us the grant ID so we can confirm your seats.
- Attend the class - trainees sign the daily attendance (T3) form.
- Claim after the class - we submit the training provider claim in eTRiS with the attendance and invoice; you then complete the employer claim and sign the JD/14 form (manager level or above). Claims must be submitted within 6 months of the training.
More details: our HRD Corp Claimable Courses page and the HRD Corp employer guidelines.
Job Roles
Job Roles
- Penetration Tester
- Ethical Hacker
- Cybersecurity Analyst
- Information Security Consultant
- Vulnerability Analyst
- Security Operations Center (SOC) Analyst
- Network Security Specialist
- IT Security Engineer
- Cybersecurity Auditor
- Compliance and Controls Analyst
- Incident Response Analyst
- Forensic Analyst
- Security Architect
- Risk Assessment Specialist
- Cyber Defense Analyst
- Application Security Engineer
- Cyber Threat Intelligence Analyst
- IT Auditor focusing on security
- Security Systems Administrator
- Information Assurance Technician
Trainers
Trainers
Dr. Muhammed Siraj is a cybersecurity specialist and academic with 15 years of experience, and as a Certified Ethical Hacker he brings genuine penetration testing practice to this CompTIA PenTest+ course. At Academic City University in Accra, Ghana, he serves as Senior Lecturer in the Department of Informatics and as Director of Graduate and Continuous Education. His academic training spans three countries: a degree from the University of Ghana, an MSc in Information and Communication Technology from Aalborg University in Denmark, and a PhD in Security in Computing from Universiti Putra Malaysia, where he researched blockchain security. Beyond the university, he is a licensed independent assessor with Ghana's Cyber Security Authority and holds leadership roles in national cybersecurity and privacy professional bodies. He is a Certified Ethical Hacker (CEH), Computer Hacking Forensic Investigator (CHFI) and Certified Data Protection Supervisor (CDPS), and was formerly Acting Director of ICT and Data Protection Supervisor at Wisconsin International University College.
Penetration testing is one of Dr. Siraj's core specialisms, and he guides learners through the full engagement lifecycle examined in CompTIA PenTest+. He begins with planning and scoping, explaining rules of engagement, legal agreements and the ethical responsibilities that separate a professional tester from an attacker, points he reinforces through his work in cybersecurity policy and data protection. He then leads learners through information gathering and vulnerability scanning, attacks and exploits against networks, applications, cloud and mobile targets, and the analysis of tools and code, drawing on his expertise in vulnerability management, cloud security, mobile and endpoint security and secure software development. His experience as a Computer Hacking Forensic Investigator helps learners understand the traces their activity leaves, while his incident response background helps them write reports that defenders can act on, so that every test leads to real remediation. Having studied for his PhD at Universiti Putra Malaysia, he is pleased to work with Malaysian security professionals building their offensive testing skills.
Dr. Alfred Ang is a full-stack AI developer, agentic AI solution architect and the Chief Technology Officer of Tertiary Infotech Academy, where he leads the teams that build the academy's platforms and design its technology training. He brings the builder's perspective to PenTest+, helping learners understand how the systems they test are designed, deployed and defended. He is CompTIA Security+ certified and holds the Certificate in AI Ethics and Governance (Senior Professional) from NTU, together with AWS Certified Solutions Architect, AWS Certified AI Practitioner and AWS Certified Cloud Practitioner credentials and the Certified Kubernetes Administrator (CKA) and Certified Kubernetes Application Developer (CKAD) certifications. His experience spans system architecture, security, observability and performance optimisation, with a strong emphasis on real-world deployment. Academically, he holds a PhD in Electrical Engineering from the National University of Singapore, an MSc in Electrical and Electronic Engineering from NTU and a BSc (Hons) in Physics from NUS. Over more than 20 years he has worked in the defence, electronics and semiconductor industries, published more than 20 peer-reviewed papers, co-invented over 20 US patents and founded several technology businesses, including Tertiary Infotech Sdn. Bhd. in Malaysia in 2016. Alongside hands-on engineering, he leads agentic AI adoption and digital transformation initiatives for enterprises, building conversational AI, autonomous agents and cloud-native platforms across AWS, Kubernetes and DevOps, with security and governance designed in from the outset. His teaching emphasises applied skills, ethical governance and sustainable adoption, translating complex technology into practical, industry-aligned learning for professionals and organisations.
Dr. Ang's contribution is the defender's and builder's view of a penetration test. He built a training environment platform that runs Docker-based WordPress, Ubuntu and Kali Linux labs in the browser with role-based access, OAuth, on-demand container start and stop and idle auto-shutdown, the kind of isolated range in which learners can practise scanning and exploitation safely and legally. His production work, including a franchise platform on Docker and Coolify across Singapore, Malaysia and Ghana, hardened Content-Security-Policy websites, a published secret-scanning skill and a credential-leak guard, shows learners what well-defended targets look like and which weaknesses testers most often find, such as exposed credentials, misconfigured containers and unsafe web code. In the Tools and Code Analysis topic he draws on his full-stack development experience to help learners read scripts, understand the code behind common exploits and recognise insecure patterns. He also stresses planning and scoping, rules of engagement and clear reporting, so that findings lead to fixes. His CompTIA Security+ certification gives him common ground with learners moving into offensive security, and he encourages them to practise only on authorised targets such as dedicated lab environments, reinforcing the legal and ethical boundaries that every professional penetration tester must respect throughout an engagement, from initial scoping to the final report. Learners are welcome to explore his lab platform and other projects on GitHub at https://github.com/alfredang and connect with him on LinkedIn at https://www.linkedin.com/in/angchewhoe/
Saeid is co-founder of Skymics Sdn Bhd. He has 8 years of experience in the field of IoT (Internet of Things) and Information Technology. He is a certified IBM IoT Practitioner and instructor, and a Certified Citizen Data Scientist Train-The-Trainer. He has been co-inventor of 3 inventions during the last 4 years.
Review
Customer Reviews (8)
- Fantastic experience Review by Course Participant/Trainee
-
The trainer is an expert in the subject and shared many practical insights from real projects. (Posted on 03/02/2026)1. Do you find the course meet your expectation? 2. Do you find the trainer knowledgeable in this subject? 3. How do you find the training environment - Very useful course Review by Course Participant/Trainee
-
Very engaging session. The trainer patiently answered all our questions and gave useful tips. (Posted on 15/09/2025)1. Do you find the course meet your expectation? 2. Do you find the trainer knowledgeable in this subject? 3. How do you find the training environment - Well structured course Review by Course Participant/Trainee
-
Great course materials and well-paced lessons. The exercises really helped me understand the topic. (Posted on 24/08/2025)1. Do you find the course meet your expectation? 2. Do you find the trainer knowledgeable in this subject? 3. How do you find the training environment - Very useful course Review by Course Participant/Trainee
-
Great course materials and well-paced lessons. The exercises really helped me understand the topic. (Posted on 25/07/2025)1. Do you find the course meet your expectation? 2. Do you find the trainer knowledgeable in this subject? 3. How do you find the training environment - Very satisfied Review by Course Participant/Trainee
-
Really enjoyed the training. The examples were relevant and the pace was just right. (Posted on 05/07/2025)1. Do you find the course meet your expectation? 2. Do you find the trainer knowledgeable in this subject? 3. How do you find the training environment
Write Your Own Review
- Recommended Courses