Pentester (Cybersecurity Consultant)

Key Responsibilities:

1. Perform manual Penetration Tests including network, servers, mobile & desktop applications and web services.

2. Assess security vulnerabilities to identify appropriate remediation: patching, configuration change, deprecation, or exception.

3. Create reports based on vulnerability metrics. Document security flaws including technical details and provide remediation recommendations.

4. Give necessary consultation and presentation to clients regarding security best practices and findings.

5. Conduct onsite penetration test or support to client's site if necessary.

Requirements (Must Have):

• BS/MS, preferably in Computer Science or Information Systems, or equivalent work experience.

• 1–3 years of experience as a security consultant, analyst, engineer, architect, or similar role in cybersecurity.

• Demonstrated in-depth experience in at least one of the following areas:

  1. Web application and web service testing

  2. Network infrastructure penetration testing

  3. Mobile application security testing (Android/iOS)

  4. Adversarial attack simulations (Red Teaming)

  5. Thick client assessment and reverse engineering

  6. Assessment of cloud platforms such as Alicloud, AWS, Azure, or Google Cloud Platform

• Active OSCP (Offensive Security Certified Professional) certification — mandatory, non-negotiable.

• Knowledge of secure design methodologies such as threat modelling and attack surface enumeration.

• Knowledge of offensive security best practices including OWASP, NIST, PTEST standard, etc.

• Excellent communication and interpersonal skills.

• Located in Jabodetabek Area.

Requirements (Good to Have):

• Entry level certifications such as CEH, eJPT, or CompTIA Security+ (as additional credentials).

• Additional professional certifications: OSEP, OSCE, OSWE, CREST CRT, GIAC (GXPN, GWAPT, GPEN, GMOB), CPENT, or equivalent.

• Development / code review experience — Python, Java, C, C#, Shell Scripting, etc.

• Passionate about cybersecurity, eager to research and learn about information security trends and new offensive techniques.

• Willingness to work toward obtaining additional credentials and ability to pass on experiential knowledge to the team.

• High degree of integrity, commitment, adaptability, and initiative.