Penetration Tester

Telkom Indonesia; Indonesia; On-site; IDR 300,000,000 - 600,000,000; Full time

Job summary

Telkom Indonesia is seeking an experienced security professional to lead advanced penetration testing across web apps, APIs, containers, networks, OS, databases, and cloud environments. You will act as a primary client liaison, own engagements, and drive progress with the team, delivering comprehensive security assessments.

The role emphasizes hands-on testing, robust reporting, and mentoring junior staff, while contributing to R&D efforts and knowledge sharing across the organization.

Qualifications

• More than 3 years of hands-on penetration testing across web apps, APIs, containers, networks, OS, databases, and cloud.
• Experience in producing comprehensive security assessment reports.
• Strong knowledge of offensive security methodologies and secure SDLC.
• Familiarity with OWASP Top 10, NIST, CIS, MITRE ATT&CK, and adversary tactics.
• Proficiency in scripting with Python, PowerShell, and Bash.
• Hands-on exploitation and defense evasion techniques.
• Active industry certifications (OSCP, CREST CRT, OSWA or comparable).
• High integrity and ethical conduct when handling sensitive information.

Responsibilities

• Conduct high-level assessments across servers, networks, and applications.
• Serve as the primary point of contact for large clients.
• Take ownership and leading engagements in collaboration with the team.
• Engage with customers to communicate project progress and outcomes.
• Develop structured and detailed action plans for specialized security assessment.
• Contribute and take ownership of research and development initiatives.
• Support internal and external knowledge sharing.
• Provide guidance, mentoring, and training to junior and intermediate-level penetration testers.

Skills

Penetration testing

Client engagement

Team leadership

Security research

Scripting: Python, PowerShell, Bash

Security tooling knowledge

Threat modeling / MITRE ATT&CK

Reporting / documentation

Ethical conduct

Adaptability & collaboration

Education

OSCP / CREST CRT / OSWA or equivalent

Tools

Kali Linux

Metasploit

Nessus

Invicti

Nmap

Burp Suite

Job description

• Conduct high-level assessments across servers, networks, and applications.
• Serve as the primary point of contact for large clients.
• Take ownership and leading engagements in collaboration with the team.
• Engage with customers to communicate project progress and outcomes.
• Develop structured and detailed action plans for specialized security assessment.
• Contribute and take ownership of research and development initiatives.
• Support internal and external knowledge sharing.
• Provide guidance, mentoring, and training to junior and intermediate-level penetration testers.

Qualification

• More than 3 years of experience in penetration testing covering web apps, APIs, containers, networks, OS, databases, and cloud environments.
• Demonstrated expertise in technical documentation and delivering comprehensive security assessment reports.
• Strong knowledge of offensive security methodologies and secure software development principles.
• Understanding in OWASP Top 10, NIST, CIS Benchmarks, MITRE ATT&CK, and adversary tactics and techniques.
• Proficient in scripting with Python, PowerShell, and Bash.
• Experienced in exploitation methods and defense evasion techniques.
• Hands‑on experience with security tools including Kali Linux, Metasploit, Nessus, Invicti, Nmap, and Burp Suite.
• Analytical, adaptable, and collaborative.
• Active industry certifications (OSCP, CREST CRT, OSWA, or comparable)
• High level of integrity, professionalism, and ethical conduct in handling sensitive security information and systems.