Security Engineer — Penetration Testing & Cloud Risk

Phincon Pte Ltd; Kota Bandung; On-site; IDR 240,000,000 - 420,000,000; Full time

Job summary

Phincon Pte Ltd in Bandung, Indonesia seeks a security engineer to perform penetration testing and red teaming on internal applications, identifying critical vulnerabilities and delivering PoCs with business impact assessments.

The role requires familiarity with ISO 27001, CIS Controls, and secure SDLC practices, plus scripting skills in bash or Python. You will collaborate with multiple teams to strengthen security across infrastructure and applications.

Qualifications

• Bachelor’s degree or equivalent in a relevant IT field.
• Experience with security testing and red teaming.
• Familiar with CIS Controls, ISO 27001, OWASP, PTES, and NIST SP 800-115 frameworks.

Responsibilities

• Penetration Testing & Red Teaming on internal apps to identify vulnerabilities and provide PoCs detailing technical and business impacts.
• Dependency Analysis & Validation across 100+ dependencies using CVEs, GHSA, and CVSS to map third‑party component risks.
• False Positive Elimination via manual code reviews and exploit replication based on CVEs.
• Secure SDLC implementation with security reviews before production deployment.
• Reporting & cross‑divisional collaboration: write and present findings to technical teams and management in clear language.
• Security standards consultation based on CIS Controls, ISO 27001, OWASP, PTES, and NIST SP 800‑115.

Skills

Linux OS

Windows OS

Cloud security

Scripting (bash, Python)

ISO 27001 familiarity

Education

Bachelor’s Degree in Software Engineering / Computer Science / Information Technology

Job description

Phincon Pte Ltd in Bandung, Indonesia seeks a security engineer to perform penetration testing and red teaming on internal applications, identifying critical vulnerabilities and delivering PoCs with business impact assessments.

The role requires familiarity with ISO 27001, CIS Controls, and secure SDLC practices, plus scripting skills in bash or Python. You will collaborate with multiple teams to strengthen security across infrastructure and applications.