Senior Penetration Tester - Lead Security Assessments

Axonect; Jakarta Pusat; On-site; IDR 350,000,000 - 700,000,000; Full time

Job summary

Axonect membuka lowongan Senior Penetration Tester untuk memimpin penilaian keamanan end-to-end pada aplikasi web, API, mobile, jaringan internal, dan infrastruktur cloud. Posisi ini melibatkan skoping teknis, pengujian penetrasi secara hands-on, validasi eksploit, serta retest, sambil memberikan panduan remediasi yang dapat ditindaklanjuti kepada tim rekayasa.

Anda akan memimpin sesi debrief, membangun playbooks, dan membimbing junior security assessors melalui review laporan serta berbagi

Qualifications

• Minimum 5 years in offensive security or 7 years in cybersecurity with 4 years in penetration testing
• Experience managing critical engagements in high-risk sectors (Finance, Telecom, E‑commerce, Government)
• In-depth knowledge of OWASP Top 10 and WSTG, testing auth flaws, IDOR, SSRF, insecure deserialization, business logic bugs, API vulnerabilities (REST/GraphQL)
• Mobile security knowledge per OWASP MASTG, Android/iOS analysis, client-side bypasses
• Scripting in Python/Bash/PowerShell; PoCs modification and custom scripts
• Familiarity with PTES, OSSTMM, NIST SP 800-115, MITRE ATT&CK, CVSS, PCI DSS, ISO 27001, and Indonesian regulations (POJK/SEOJK UU PDP)
• Preferred Practical/Hands-on certs: OSCP with OSEP/OSWE/GPEN/GWAPT/CRTO/CREST CRT
• Advanced: OSCE³, GXPN, CARTP/CARTS, eWPTX, GMOB
• Complementary: CEH, CompTIA PenTest+

Responsibilities

• Leadership: lead scoping, set RoE, and conduct end-to-end assessments
• Hands-on testing across Web, Mobile, API, Network, AD, and Cloud with manual validation
• Produce two-tier reports: Executive Summary and detailed remediation steps
• Lead debriefs, communicating findings to leaders and engineers
• Conduct retests to confirm fix effectiveness and risk reduction
• Mentor junior team members and develop internal playbooks and tooling

Skills

Python

Bash

PowerShell

Education

OSCP

OSEP

OSWE

GPEN

GWAPT

CRTO

CREST CRT

OSCE³

GXPN

Tools

PoCs

Job description

Axonect membuka lowongan Senior Penetration Tester untuk memimpin penilaian keamanan end-to-end pada aplikasi web, API, mobile, jaringan internal, dan infrastruktur cloud. Posisi ini melibatkan skoping teknis, pengujian penetrasi secara hands-on, validasi eksploit, serta retest, sambil memberikan panduan remediasi yang dapat ditindaklanjuti kepada tim rekayasa.

Anda akan memimpin sesi debrief, membangun playbooks, dan membimbing junior security assessors melalui review laporan serta berbagi