Senior Penetration Tester | Offensive Security Expert

Techconnect.id; Pulau Untung Jawa; On-site; IDR 300,000,000 - 600,000,000; Full time

Benefits offered by this job

Private Health Insurance

Pension Plan

Training & Development

Performance Bonus

Job summary

Techconnect.id is hiring a penetration tester to conduct authorized assessments across web apps, APIs, networks, and cloud environments. You will perform recon, vulnerability discovery, exploitation, and post-exploitation inside approved scopes and craft comprehensive reports with risk ratings and remediation guidance.

The role emphasizes hands-on testing, adherence to OWASP Top 10, and collaboration with engineering and client teams to validate fixes and improve methodologies.

Qualifications

• Bachelor’s degree in Computer Science, IT, Cybersecurity, Information Systems, or related field.
• Min. 2–4 years of hands-on experience in penetration testing, offensive security, vulnerability assessment, or related cybersecurity role.
• Demonstrable experience conducting penetration tests in professional or client-facing environments.

Responsibilities

• Conduct authorized penetration testing across Web applications, APIs, network infrastructure, cloud environments, and other assets.
• Perform reconnaissance, vulnerability discovery, exploitation, and post-exploitation within approved scopes.
• Identify vulnerabilities including authentication/authorization issues, injections, misconfigurations, access control weaknesses, insecure APIs, and other security flaws.

Skills

Penetration testing

Offensive security

Vulnerability assessment

Web application testing

API security testing

Networking knowledge

Documentation skills

Report writing

Education

Bachelor's degree in Computer Science / Information Technology / Cybersecurity

Tools

Burp Suite

Nmap

Metasploit

SQLMap

Wireshark

Gobuster

ffuf

Job description

Techconnect.id is hiring a penetration tester to conduct authorized assessments across web apps, APIs, networks, and cloud environments. You will perform recon, vulnerability discovery, exploitation, and post-exploitation inside approved scopes and craft comprehensive reports with risk ratings and remediation guidance.

The role emphasizes hands-on testing, adherence to OWASP Top 10, and collaboration with engineering and client teams to validate fixes and improve methodologies.