Lead Telco Red Team Penetration Tester

PT. Indosat Tbk; Jakarta Pusat; On-site; IDR 180,000,000 - 280,000,000; Full time

Job summary

PT. Indosat Tbk in Jakarta Pusat is seeking an experienced security lead to identify, analyze, and mitigate vulnerabilities across our systems and networks through advanced penetration testing. You will plan red team exercises and coordinate vulnerability management with IT teams to implement fixes.

Ideal candidates bring 5–7 years in vulnerability testing, cloud security experience (AWS/Azure/GCP), and hands-on DevSecOps skills, including Docker and Kubernetes. Fluency in English is required.

Qualifications

• Bachelor’s degree in IT, Electrical, Telecom, CS or related field.
• C|EH V12 certification is preferred and other security certificates are advantageous.
• Familiar with OWASP Top 10 Web and API security principles.
• Experience in vulnerability testing, cloud security, and secure DevOps practices.

Responsibilities

• Identify, analyze, and mitigate vulnerabilities in company systems and networks through penetration testing.
• Lead red team activities and orchestrate simulated cyber-attacks to validate defenses.
• Coordinate third-party vulnerability management and remediation actions.
• Collaborate with IT teams to implement security measures and fix findings.
• Prepare detailed vulnerability reports and risk-based recommendations.

Skills

Penetration testing

Vulnerability assessment

Cloud security (AWS/Azure/GCP)

DevSecOps

Docker

Kubernetes

English fluency

Networking knowledge

Security monitoring

Education

Bachelor’s degree in IT / EE / Telecom / CS

Tools

Docker

Kubernetes

CI/CD tools

AWS

Azure

GCP

Job description

PT. Indosat Tbk in Jakarta Pusat is seeking an experienced security lead to identify, analyze, and mitigate vulnerabilities across our systems and networks through advanced penetration testing. You will plan red team exercises and coordinate vulnerability management with IT teams to implement fixes.

Ideal candidates bring 5–7 years in vulnerability testing, cloud security experience (AWS/Azure/GCP), and hands-on DevSecOps skills, including Docker and Kubernetes. Fluency in English is required.