IT Security Engineer (Middle Level)

PT IDstar Cipta Teknologi (IDstar); Jakarta Pusat; On-site; IDR 240,000,000 - 360,000,000; Full time

Job summary

PT IDstar Cipta Teknologi (IDstar) is seeking an experienced IT Security Engineer (Red Team) to perform penetration testing, adversary simulation, and security assessments across enterprise environments in Jakarta. The ideal candidate has hands-on offensive security experience and strong knowledge of OWASP Top 10 and OWASP WSTG.

Responsibilities include conducting Red Team exercises, identifying vulnerabilities, creating PoC exploits, and assisting owners in remediation.

Qualifications

• Bachelor's degree in cybersecurity, CS, IT, or related field.
• At least 3 years in offensive security, penetration testing, or red team.
• Strong knowledge of OWASP Top 10 and OWASP WSTG.
• OSCP certification is mandatory.

Responsibilities

• Conduct penetration testing, Red Team exercises, and security assessments.
• Identify, validate, and report security vulnerabilities.
• Create Proof of Concept (PoC) exploits and security assessment reports.
• Support application and system owners in validating and remediating security findings.
• Perform retesting after vulnerabilities have been fixed.
• Stay updated with the latest vulnerabilities, CVEs, and attack techniques.
• Explore new security tools and automation to improve testing processes.

Skills

Offensive Security

Penetration Testing

Red Team

Kali Linux

Burp Suite

OWASP Top 10

OWASP WSTG

Vulnerability Assessment

Reporting

Communication

Education

Bachelor's degree in Cybersecurity/CS/IT

Tools

Kali Linux

Burp Suite

OWASP ZAP

Postman

Vulnerability Scanners

Job description

n We are seeking an experienced IT Security Engineer (Red Team) to perform penetration testing, adversary simulation, and security assessments across enterprise environments. The ideal candidate has hands-on offensive security experience, strong knowledge of OWASP Top 10 and OWASP WSTG, and the ability to identify, validate, and help remediate security vulnerabilities.

Requirements

• Bachelor's Degree in Cybersecurity, Computer Science, Information Technology, or a related field


• Minimum 3 years of experience in Offensive Security, Penetration Testing, or Red Team


• Strong knowledge of OWASP Top 10 and OWASP WSTG


• Experience identifying common web vulnerabilities such as SQL Injection, XSS, CSRF, SSRF, XXE, IDOR, Broken Access Control, Authentication & Session issues, Insecure Deserialization, and Business Logic flaws


• Hands-on experience with Kali Linux, Burp Suite, OWASP ZAP, Postman, and vulnerability scanning tools


• OSCP certification is mandatory


• Good analytical, communication, and reporting skills

Responsibilities

• Conduct penetration testing, Red Team exercises, and security assessments


• Identify, validate, and report security vulnerabilities


• Create Proof of Concept (PoC) exploits and security assessment reports


• Support application and system owners in validating and remediating security findings


• Perform retesting after vulnerabilities have been fixed


• Stay updated with the latest vulnerabilities, CVEs, and attack techniques


• Explore new security tools and automation to improve testing processes.n