Penetration Tester (Red Team)

PT ASABA Digital Innotech; Jakarta Selatan; On-site; IDR 180,000,000 - 240,000,000; Full time

Job summary

Alpha Citra Siber Indonesia is recruiting a Penetration Tester to perform broad offensive security operations globally, emulating adversary tactics to test controls across the technology landscape. The role influences technology decisions and standardizes offensive security approaches.

You will work with a team to conduct complex testing, document findings clearly, and guide remediation with stakeholders across global operations. A related degree or equivalent experience is required.

Qualifications

• Experience in security principles such as attack frameworks, threat landscapes, and attacker tactics, techniques and procedures.
• Bachelor’s degree in a related field or equivalent experience is required.
• Experience with multiple operating systems and platform hardening is preferred.

Responsibilities

• Conduct offensive security operations testing to emulate adversary tactics and procedures across the organization globally.
• Document security issues identified through offensive operations for stakeholder reporting.
• Provide guidance to remediation teams to close gaps and validate remediation actions.
• Collaborate with defensive operations teams to mature cyber countermeasures.

Skills

Threat landscapes

Adversary tactics

OWASP Top 10

Offensive security mindset

Education

Bachelor’s degree in a related field or equivalent experience

Tools

Windows

Mac OS

Unix/Linux

Mobile platforms

Job description

Alpha Citra Siber Indonesia is looking to hire The Penetration Tester who will provide broad and in depth knowledge to conduct offensive cyber operations across the organization globally. In this role, you will conduct offensive security operations to emulate adversary tactics and procedures to test preventative, detective and response controls across the global technology landscape. You will use your expertise to help influence technology decisions and work as part of a team to create consistent approaches to the offensive security processes and techniques.

Key accountabilities

• Conduct highly complex offensive security operations testing consistent with known adversary tactics techniques and procedures and contribute to the development of objectives and approaches taken to remediate risk
• Document security issues and impacts identified through offensive operations in a clear and concise manner to facilitate reporting to impacted stakeholders
• Provide guidance and recommendations to stakeholders responsible for security remediation actions to close identified gaps and remediation validation testing
• Consult with defensive operations teams on adversary tactics to guide and mature cyber defensive countermeasures
• Bachelor’s degree in a related field or equivalent experience
• Experience in security principles such as attack frameworks, threat landscapes, and attacker tactics, techniques and procedures
• Strong understanding of Owasp 10

Preferred qualifications :

• Experience in offensive security, with the ability to think like an adversary
• Strong ability to identify and exploit security gaps/vulnerabilities on endpoint devices, applications, and networks
• Strong experience in operating system and application security hardening and best practices
• Strong investigative mindset with an attention to detail
• Experience with multiple operating systems to include Windows, Mac OS, Unix/Linux, and mobile platforms
• Experience conducting assessments for solutions consisting of a variety of technology stacks and architectural implementations and hosting providers
• Exposure and understanding of enterprise solutions from a functional and security perspective