Penetration Tester (Red Team)

Alpha Citra Siber Indonesia is looking to hire The Penetration Tester who will provide broad and in depth knowledge to conduct offensive cyber operations across the organization globally. In this role, you will conduct offensive security operations to emulate adversary tactics and procedures to test preventative, detective and response controls across the global technology landscape. You will use your expertise to help influence technology decisions and work as part of a team to create consistent approaches to the offensive security processes and techniques.

Key accountabilities

· Conduct highly complex offensive security operations testing consistent with known adversary tactics techniques and procedures and contribute to the development of objectives and approaches taken to remediate risk

· Document security issues and impacts identified through offensive operations in a clear and concise manner to facilitate reporting to impacted stakeholders

· Provide guidance and recommendations to stakeholders responsible for security remediation actions to close identified gaps and remediation validation testing

· Consult with defensive operations teams on adversary tactics to guide and mature cyber defensive countermeasures

Minimum qualifications :

· Bachelor’s degree in a related field or equivalent experience

· Experience in security principles such as attack frameworks, threat landscapes, and attacker tactics, techniques and procedures

· Strong understanding of Owasp 10

Preferred qualifications :

· Experience in offensive security, with the ability to think like an adversary

· Strong ability to identify and exploit security gaps/vulnerabilities on endpoint devices, applications, and networks

· Strong experience in operating system and application security hardening and best practices

· Strong investigative mindset with an attention to detail

· Experience with multiple operating systems to include Windows, Mac OS, Unix/Linux, and mobile platforms

· Experience conducting assessments for solutions consisting of a variety of technology stacks and architectural implementations and hosting providers

· Exposure and understanding of enterprise solutions from a functional and security perspective