Senior Consultant

Vantage Point Security Group; Jakarta Pusat; On-site; IDR 360,000,000 - 600,000,000; Full time

Job summary

Vantage Point Security seeks a Senior Penetration Testing Consultant to lead offensive security projects, performing manual tests across websites, networks, and mobile apps. You will mentor associates, design testing strategies, and communicate findings with clients.

The role emphasizes delivering high-quality reports and maintaining CREST CRT certification. You will work primarily from our Indonesia office or client sites, with some travel as needed.

Qualifications

• Over three years of hands-on penetration testing experience.
• CREST CRT Qualification.
• Strong analytical skills and ability to draw logical conclusions from complex data.
• Experience with programming or scripting languages such as Python, Bash, PHP, Java, C#, JavaScript, Perl, or Ruby.

Responsibilities

• Own projects from a technical standpoint, internally and with clients.
• Closely monitor project progress and delivery schedules.
• Conduct manual penetration tests on websites, services, infrastructure, networks, IoT devices, and mobile apps to identify vulnerabilities.
• Provide technical leadership to help team members master attack methods and achieve 100% test-case coverage.
• Document findings and recommendations clearly to clients.
• Develop new test cases for emerging technologies and security needs.
• Maintain CREST CRT certification.

Skills

Penetration testing

CREST CRT

Programming languages

Network architectures

Threat modelling

Tools

Python

Bash

PHP

Java

C#

JavaScript

Perl

Ruby

Job description

Senior Penetration Testing Consultant

Join Vantage Point Security, a distinguished Crest Registered organization specializing in offensive security and Penetration Testing. As experts in our field, we utilize the same techniques as malicious attackers to detect and report security vulnerabilities in our clients' critical systems, ensuring their protection and stability.

Purpose of the Role:

Lead and inspire others as a Senior Security Consultant in executing penetration testing and offensive security projects, ensuring exceptional results that meet or exceed our client's expectations.

Role Outcomes:

• Establish yourself as a subject matter expert, earning the trust and confidence of clients in our comprehensive testing methodology and precise results.
• Deliver penetration testing projects efficiently and on schedule.
• Accurately scope projects and communicate estimated testing times for producing a Statement of Work (SOW).
• Prepare penetration testers to commence testing according to schedule.
• Coordinate with clients to set up testing environments and facilitate smooth, timely engagements.
• Uphold the quality of Penetration Testing Reports through peer review and approval for client release.
• Manage client data in adherence to Vantage Point Security data security and protection policies throughout the project.

Key Responsibilities:

• Own projects from a technical standpoint, internally and in collaboration with clients.
• Closely monitor project progress and delivery schedules with the Project Manager.
• Conduct manual penetration tests on websites, services, infrastructure, networks, IoT devices, and mobile applications to identify and report vulnerabilities.
• Offer technical leadership and guidance to help team members master attack methods and reliably perform 100% coverage of assigned test cases.
• Document and communicate findings and recommendations clearly to clients.
• Develop new test cases to address emerging technologies and security requirements.
• Continually learn and master new hacking methods in emerging technologies.
• Maintain a minimum of CREST CRT certification.

Presales Support:

• Assist with technical scoping and production of SOWs during project briefings.
• Advise the Project Manager on appropriate resource allocation for each project.

Penetration Testing:

• Serve as the primary liaison between the customer and the client.
• Attend project kick-off meetings and ensure our clients are prepared for testing to commence on schedule.
• Delegate and manage project teams on large projects to meet client expectations and ensure timely completion.
• Establish well-defined escalation processes for resolving technical issues during penetration tests.
• Provide technical support and guidance to penetration testers throughout testing.

Reporting and Remediation:

• Guarantee the quality and timely delivery of Penetration Testing Reports.
• Translate complex technical vulnerabilities into comprehensible business impacts for stakeholders while providing clear, actionable remediation advice to clients' technical representatives.

Team Leadership:

• Oversee Associate Consultants and Consultants on smaller projects to ensure adherence to VP standards.
• Provide on-the-job training and practical solutions to technical questions regarding testing methods, remediation advice, and reported findings.
• Advocate for and support company initiatives promoting professional development and team well-being.
• Mentor Associates through the CRT accreditation process.
• Actively contribute to knowledge-sharing at Vantage Point Show and Tell sessions, fostering a culture of continuous learning and development.
• Attend technical conferences to stay current on the latest testing methods and technological advancements.

Required Skills and Experience:

You will likely possess the following:

• Over three years of hands-on penetration testing experience.
• CREST CRT Qualification.
• Strong analytical skills and ability to draw logical conclusions from complex data.
• Demonstrated experience with one or more programming or scripting languages such as Python, Bash, PHP, Java, C#, JavaScript, Perl, or Ruby.
• Comprehensive understanding of network architectures (cloud and physical) and the underlying OSI Model.
• Familiarity with security touch points in the SDLC, including architecture risk analysis, threat modelling, security requirement gathering, and source code analysis.

Role Information:

Reports to: Associate Principle Consultant

• Hours: Full Time (40 hours/week)
• Language: Proficiency in spoken and written English and Bahasa is required.
• Location: Primarily based in our Indonesia office or at client sites, with occasional travel to other business locations as needed.

Become a part of the Vantage Point Security team and make a difference in cybersecurity. As a Senior Penetration Testing Consultant, you will play a crucial role in safeguarding our clients' business-critical systems and driving the success of our projects. Join us in pursuing excellence and continuous growth in the ever-evolving cybersecurity landscape.