Penetration Testing Lead | RoE Design & Mentoring

PT ASABA Digital Innotech; Jakarta Selatan; On-site; IDR 240,000,000 - 420,000,000; Full time

Job summary

PT ASABA Digital Innotech is seeking an experienced Penetration Tester to evaluate security across network, web, API, mobile, and social engineering surfaces. You will identify vulnerabilities and provide actionable remediation for client businesses.

You will design Rules of Engagement, define project scope, and mentor junior testers while ensuring high-quality methodologies and clear, concise reporting for non-technical stakeholders.

Qualifications

• Hands-on penetration testing or red teaming with 3–5 years experience.
• Proficient across multiple attack surfaces: network infra, web apps, APIs, mobile, social engineering.
• Holds industry certifications such as OSCP, OSWP, CRT, or CISSP.
• Able to design scoping documents and Rules of Engagement.
• Experienced in overseeing team workflows and reviewing testing methodologies.

Responsibilities

• Evaluate attack surfaces including network, web apps, APIs, mobile, and social engineering vectors.
• Identify vulnerabilities and provide safe remediation recommendations for clients.
• Design Rules of Engagement and define project scope.
• Supervise and guide junior pentesters.
• Review and ensure quality of methodologies used by the team.
• Translate complex findings into clear reports for non-technical management.

Skills

Penetration testing

Red team

Network infrastructure

Web applications

APIs

Mobile platforms

Social engineering

Team leadership

Education

OSCP

OSWP

CRT

CISSP

Job description

PT ASABA Digital Innotech is seeking an experienced Penetration Tester to evaluate security across network, web, API, mobile, and social engineering surfaces. You will identify vulnerabilities and provide actionable remediation for client businesses.

You will design Rules of Engagement, define project scope, and mentor junior testers while ensuring high-quality methodologies and clear, concise reporting for non-technical stakeholders.