Cybersecurity Engineer: Cloud, App Security & Pen Testing

PT Phincon; Kota Bandung; On-site; IDR 167,400,000 - 279,000,000; Full time

Job summary

Phintraco Consulting (PhinCon) is seeking security-focused professionals to perform penetration testing and red teaming on internal applications. You will map risks from dependencies and validate findings to drive mitigations.

Responsibilities include secure SDLC reviews, detailed reporting, and governance guidance based on CIS Controls, ISO27001, OWASP, PTES, and NIST frameworks. Phintraco Consulting is a trusted Oracle partner in Indonesia.

Qualifications

• Bachelor’s degree in Software Engineering / Computer Science / Information Technology or equivalent experience.
• Familiar with ISO27001.
• Experience with Linux and Windows OS.
• Familiar with cloud security services (AWS, Azure, GCP).
• Able to create scripts (bash, python).
• Cloud security certification is a plus.

Responsibilities

• Penetration Testing & Red Teaming: conduct attack simulations and red teaming on internal applications to identify vulnerabilities and develop PoCs.
• Dependency Analysis & Validation: map risk from dependencies using CVE databases and CVSS scores.
• False Positive Elimination: review findings and confirm true positives to prioritize mitigations.
• Secure SDLC Implementation: perform security reviews and testing for new features before production.
• Reporting & Cross-Divisional Collaboration: write clear reports and present findings to technical and management teams.
• Security Standards Consultation: provide governance recommendations based on CIS Controls, ISO27001, OWASP, PTES, NIST.

Skills

Linux

Windows OS

Cloud security

Scripting

ISO27001

Penetration testing

Red teaming

Education

Bachelor's degree in Software Engineering/CS/IT

Tools

AWS

Azure

GCP

OWASP

NIST SP 800-115

Job description

Phintraco Consulting (PhinCon) is seeking security-focused professionals to perform penetration testing and red teaming on internal applications. You will map risks from dependencies and validate findings to drive mitigations.

Responsibilities include secure SDLC reviews, detailed reporting, and governance guidance based on CIS Controls, ISO27001, OWASP, PTES, and NIST frameworks. Phintraco Consulting is a trusted Oracle partner in Indonesia.