Penetration Testing (Pentester)

About the role

Cybersecurity Consultant (Pentest) performing manual penetration tests across network, servers, mobile & desktop applications and web services. You will assess security vulnerabilities, create detailed reports with remediation recommendations, and provide consultation to clients on security best practices and findings.

Key responsibilities

• Perform manual Penetration Tests including network, servers, mobile & desktop applications and web services.
• Assess security vulnerabilities to identify appropriate remediation: patching, configuration change, deprecation, or exception.
• Create reports based on vulnerability metrics. Document security flaws including technical details and provide remediation recommendations.
• Give necessary consultation and presentation to clients regarding security best practices and findings.
• Conduct onsite penetration test or support to client's site if necessary.

About you

• BS/MS, preferably in computer science or information systems, or equivalent work experience.
• Demonstrated in-depth experience in at least one of the following areas of technical competency: Web application and web service testing, Network infrastructure penetration testing, Mobile application security testing (Android/iOS), Adversarial attack simulations (Red Teaming), Thick client assessment and reverse engineering, Assessment of cloud platforms such as Alicloud, AWS, Azure or Google Cloud Platform.
• Knowledge of secure design methodologies (such as threat modelling and attack surface enumeration).
• Previous experience 1-3 years as a security consultant, analyst, engineer, architect or a similar role related to cyber security.
• Excellent communication and interpersonal skills.
• Knowledge about offensive security best practice (such as OWASP, NIST, PTEST standard, etc).
• Entry level offensive cybersecurity certification such as CEH, eJPT, COMPTIA+.
• Located in Jabodetabek Area.
• Passionate about cybersecurity, eager to research and learn about information security trends and new offensive techniques and best practices.
• Professional offensive security certifications including OSCP, OSEP, OSCE, OSWE, CREST CRT, GIAC (GXPN, GWAPT, GPEN, GMOB), CPENT others are an asset.