Penetration Tester: Web, API & Cloud Security Expert

Techconnect.id; Jakarta Pusat; On-site; IDR 260,000,000 - 420,000,000; Full time

Benefits offered by this job

Private Health Insurance

Pension Plan

Training & Development

Performance Bonus

Job summary

Techconnect.id in Indonesia seeks a hands-on Penetration Tester to assess web apps, APIs, networks, and cloud environments for clients. You will conduct authorized tests, compile reports, and present findings to both technical and non-technical stakeholders.

2–4 years of practical offensive security experience, familiarity with OWASP Top 10, and proficiency with Burp Suite, Nmap, Metasploit, SQLMap, Wireshark, and Gobuster are preferred.

Qualifications

• Hands-on penetration testing across web apps, APIs, networks and cloud environments.
• Experience in vulnerability assessment, exploitation, and PoC development.
• Strong understanding of OWASP Top 10 and common web vulnerabilities.
• Ability to produce clear, technically accurate penetration testing reports.

Responsibilities

• Conduct authorized penetration testing across Web apps, APIs, networks, and cloud environments.
• Identify vulnerabilities and validate them with controlled PoCs.
• Perform manual and automated security testing of web apps and APIs.
• Review findings and prioritize by severity, exploitability, and business impact.
• Prepare comprehensive reports with executive summaries, evidence, risk ratings, and remediation guidance.
• Present findings to technical and non-technical stakeholders; collaborate with client teams for remediation.

Skills

Penetration testing

Offensive security

OWASP Top 10

Web security testing

API security testing

Reporting & communication

Linux & Windows

Client-facing

Education

Bachelor's degree in Computer Science or related field

Tools

Burp Suite

Nmap

Metasploit

SQLMap

Wireshark

Gobuster/ffuf

Job description

Techconnect.id in Indonesia seeks a hands-on Penetration Tester to assess web apps, APIs, networks, and cloud environments for clients. You will conduct authorized tests, compile reports, and present findings to both technical and non-technical stakeholders.

2–4 years of practical offensive security experience, familiarity with OWASP Top 10, and proficiency with Burp Suite, Nmap, Metasploit, SQLMap, Wireshark, and Gobuster are preferred.