Lead Penetration Tester — Banking & Cloud Security

GFT Technologies APAC & GCC; Jakarta Pusat; Hybrid; IDR 1,431,127,000 - 2,504,472,000; Full time

Job summary

GFT Technologies APAC & GCC is seeking a Lead Penetration Tester to assess security across banking apps, APIs, cloud platforms, and infrastructure. The role involves authorised testing, risk validation, remediation support, and regulatory alignment. Occasional client-site work may be required.

Open relocation to Vietnam is available; ideal candidates bring extensive ethical hacking experience and strong collaboration with security, DevOps, and engineering teams.

Qualifications

• Hands-on penetration testing across web, mobile, API, network and cloud environments.
• Strong knowledge of banking systems, digital banking, payments and AML/KYC.
• Deep knowledge of web/API security including OWASP Top 10 and related risks.
• Experience testing iOS/Android apps including crypto and secure storage.
• Cloud security principles across AWS/Azure/GCP.

Responsibilities

• Conduct penetration testing across web, mobile, APIs, cloud and banking platforms.
• Document vulnerabilities with risk ratings and remediation guidance.
• Produce clear security reports for technical and business stakeholders.
• Collaborate with engineering and security teams to validate fixes.
• Support SDLC security activities, threat modelling, and release validation.
• Stay current with threats and security best practices.

Skills

Penetration testing

Ethical hacking

Vulnerability assessments

Banking security

OWASP Top 10

API security

Web/mobile testing

Cloud security

Report writing

Retesting

Team collaboration

Threat modelling

CI/CD security

Tools

Burp Suite

OWASP ZAP

Nmap

Nessus

Metasploit

Wireshark

Postman

MobSF

Job description

GFT Technologies APAC & GCC is seeking a Lead Penetration Tester to assess security across banking apps, APIs, cloud platforms, and infrastructure. The role involves authorised testing, risk validation, remediation support, and regulatory alignment. Occasional client-site work may be required.

Open relocation to Vietnam is available; ideal candidates bring extensive ethical hacking experience and strong collaboration with security, DevOps, and engineering teams.