Elite Red Team Penetration Tester

PT Sigma Cipta Caraka (Telkomsigma); Tangerang Selatan; On-site; IDR 600,000,000 - 900,000,000; Full time

Job summary

PT Sigma Cipta Caraka (Telkomsigma) is seeking a skilled security tester to perform VAPT across mobile, web, and IT infrastructure for client environments. The role includes reporting and remediation recommendations, plus leading secure coding initiatives.

You will act as a cybersecurity SME, collaborating with developers and engineers to embed security best practices throughout the development lifecycle and drive security awareness programs across teams.

Qualifications

• Experience performing vulnerability assessments and penetration testing across applications, mobile apps, and IT infrastructure.
• Ability to prepare executive summaries and detailed technical reports with remediation actions.
• Lead security awareness initiatives and promote secure coding practices.

Responsibilities

• Perform Vulnerability Assessments and Pen Testing across customer environments (mobile, web, IT infra).
• Execute testing activities and identify vulnerabilities in applications, systems, and infrastructure.
• Prepare comprehensive penetration testing reports with executive summaries and remediation recommendations.
• Manage and monitor vulnerability management across products and services.
• Identify and review vulnerabilities from SAST/DAST/IAST tools.
• Lead security awareness efforts and promote secure coding among developers and engineers.
• Act as SME in cybersecurity, providing security insights and feedback to teams.
• Collaborate with cross-functional teams to implement security best practices throughout the lifecycle.

Skills

VAPT

Penetration Testing

Threat Analysis

Security Reporting

Secure Coding

Tools

SAST Tools

DAST Tools

IAST Tools

Job description

PT Sigma Cipta Caraka (Telkomsigma) is seeking a skilled security tester to perform VAPT across mobile, web, and IT infrastructure for client environments. The role includes reporting and remediation recommendations, plus leading secure coding initiatives.

You will act as a cybersecurity SME, collaborating with developers and engineers to embed security best practices throughout the development lifecycle and drive security awareness programs across teams.