Offensive Security Engineer — Web & App Pen Testing

TechConnect GmbH; Jakarta Pusat; On-site; IDR 180,000,000 - 360,000,000; Full time

Benefits offered by this job

Private Health Insurance

Pension Plan

Training & Development

Performance Bonus

Job summary

TechConnect GmbH is seeking an experienced penetration tester to conduct authorized assessments across Web applications, APIs, networks, and cloud environments from Jakarta. You will perform recon, exploitation, and post-exploitation activities, validate findings with PoCs, and deliver clear, actionable reports to clients.

The role requires 2–4 years in the field, strong knowledge of networking and web technologies, and hands-on experience with Burp Suite, Nmap, Metasploit, and other security

Qualifications

• Bachelor-level degree in CS/IT/Cybersecurity or related field.
• 2–4 years hands-on penetration testing or offensive security experience.
• Experience performing client-facing pentests.
• Strong understanding of networks, OS, web tech, auth, and common vulns.
• Familiarity with OWASP Top 10 and web vulnerabilities.
• Hands-on with web app/API pentesting, vulnerability assessment, exploitation.

Responsibilities

• Conduct authorized penetration testing across web apps, APIs, networks, and cloud environments.
• Perform recon, vulnerability discovery, exploitation, and post-exploitation within scope.
• Identify and validate vulnerabilities with PoC exploitation.
• Produce comprehensive penetration testing reports with executive summaries and remediation recommendations.
• Present findings to technical and non-technical stakeholders.
• Collaborate with client teams to understand environments and validate fixes.
• Stay updated on new vulnerabilities and testing tools.

Skills

Penetration testing

OWASP Top 10

Burp Suite

Nmap

Metasploit

Report writing

Client-facing

Education

Bachelor's degree in CS/IT/Cybersecurity

Tools

Burp Suite

Nmap

Metasploit

SQLMap

Wireshark

Gobuster/ffuf

Job description

TechConnect GmbH is seeking an experienced penetration tester to conduct authorized assessments across Web applications, APIs, networks, and cloud environments from Jakarta. You will perform recon, exploitation, and post-exploitation activities, validate findings with PoCs, and deliver clear, actionable reports to clients.

The role requires 2–4 years in the field, strong knowledge of networking and web technologies, and hands-on experience with Burp Suite, Nmap, Metasploit, and other security