Penetration Tester

PT. Magnus Sedaya Selaras; Jakarta Pusat; On-site; IDR 180,000,000 - 320,000,000; Full time

Job summary

PT. Magnus Sedaya Selaras in Jakarta is seeking a skilled Penetration Tester to join our cybersecurity team. You will identify vulnerabilities in Web, Mobile, APIs, and IT infrastructure and provide actionable remediation guidance to clients.

You will use Burp Suite, Nmap, and Metasploit to conduct testing, report findings with risk ratings, and collaborate with clients and internal teams to strengthen security postures while adhering to scope and ethical guidelines.

Qualifications

• Bachelor's degree in IT, CS, cybersecurity or related field; equivalent practical experience considered.
• Strong knowledge of networking concepts (TCP/IP, DNS, HTTP/HTTPS) and security testing methodologies.
• Hands-on penetration testing with Burp Suite, Nmap and Metasploit; familiarity with vulnerability scanners.

Responsibilities

• Conduct penetration testing on Web, Mobile apps, APIs, and IT infrastructure.
• Perform security testing using automated and manual techniques.
• Analyze findings, assess risk, and provide remediation recommendations.

Skills

Networking concepts

TCP/IP

DNS

HTTP/HTTPS

Routing

Network services

Vulnerability assessment

Penetration testing

Analytical thinking

Communication skills

Team collaboration

Ethical hacking

Education

Bachelor's degree in IT/CS/Cybersecurity

Tools

Burp Suite

Nmap

Metasploit

Job description

We are looking for a skilled and motivated Penetration Tester to join our cybersecurity team. The successful candidate will be responsible for identifying security vulnerabilities, assessing risks, and providing actionable recommendations to improve the security posture of our clients' IT infrastructure and applications.

Key Responsibilities

• Conduct penetration testing and vulnerability assessments on Web and Mobile Applications, APIs, and IT infrastructure.
• Perform security testing using both automated tools and manual testing techniques.
• Perform vulnerability analysis, exploitation, and post-exploitation activities within an authorized testing scope.
• Prepare comprehensive penetration testing reports, including findings, evidence, risk ratings, and remediation recommendations.
• Collaborate with internal security teams and clients to communicate technical findings and recommend appropriate mitigation strategies.
• Ensure all security testing activities comply with agreed scopes, rules of engagement, and applicable security standards.

Requirements

• Bachelor's degree in Information Technology, Computer Science, Cybersecurity, or a related field. Equivalent practical experience is also considered.
• Good understanding of networking concepts, TCP/IP, DNS, HTTP/HTTPS, routing, and common network services.
• Hands-on experience with penetration testing tools such as Burp Suite, Nmap, Metasploit, and vulnerability scanners.
• Knowledge of common security vulnerabilities, exploitation techniques, authentication mechanisms, and access control weaknesses.
• Ability to analyze technical findings, assess risk, and provide practical remediation recommendations.
• Strong analytical, problem-solving, documentation, and communication skills.
• Able to work independently and collaboratively within a team.
• Professional integrity and a strong commitment to ethical hacking practices.
• Relevant certifications such as eJPT, PNPT, OSCP, CEH, or equivalent certifications are an advantage.
• Experience working in a cybersecurity service provider, consulting firm, or Managed Security Service Provider (MSSP) is a plus.

What We Offer

• Opportunities to work on real-world cybersecurity engagements across different environments.
• Exposure to diverse IT infrastructure, applications, and security technologies.
• Opportunities for professional development and cybersecurity certification.
• A collaborative environment focused on continuous learning and technical growth.

Thank you for your interest in joining our team.