Senior Penetration Tester - Web, API & Cloud Security

Techconnect; Jakarta Pusat; Hybrid; IDR 180,000,000 - 320,000,000; Full time

Benefits offered by this job

Private Health Insurance

Pension Plan

Training & Development

Performance Bonus

Job summary

Techconnect is seeking an experienced penetration tester to conduct authorized assessments of Web apps, APIs, networks, and cloud environments from Jakarta. You will perform reconnaissance, exploit vulnerabilities, and validate findings, delivering thorough reports and remediation guidance to clients.

The role requires 2–4 years of hands-on pentesting experience, strong knowledge of OWASP Top 10, and proficiency with Burp Suite, Nmap, and Metasploit. Relevant certifications are highly valued.

Qualifications

• Bachelor's degree in Computer Science, Information Technology, Cybersecurity, Information Systems, or a related field.
• Min. 2–4 years of hands‑on experience in penetration testing, offensive security, vulnerability assessment, or a closely related cybersecurity role.
• Demonstrable experience conducting penetration tests in a professional or client‑facing environment.
• Strong understanding of networking, operating systems, web technologies, authentication mechanisms, and common security vulnerabilities.
• Strong understanding of penetration testing methodologies and vulnerability assessment.
• Hands‑on experience with web application penetration testing, API security testing, network penetration testing, vulnerability assessment, exploitation and proof‑of‑concept development
• Familiarity with OWASP Top 10 and common web application vulnerabilities.
• Working knowledge of Linux and Windows environments.
• Understanding of TCP/IP, DNS, HTTP/HTTPS, VPN, firewalls, and network security concepts.
• Experience with offensive security tools such as Burp Suite, Nmap, Metasploit, SQLMap, Wireshark, Gobuster/ffuf, or equivalent tools.
• Ability to perform manual testing and not rely solely on automated scanners.
• Ability to produce clear and technically accurate penetration testing reports.
• Have at least one of these certifications: OSCP, OSEP, OSWA, OSWE, CREST CRT, GPEN, GWAPT, GCPN, eMAPT, PNPT, ECSA, CPENT, LPT, CompTIA Pentest+, HTB CPTS, CEH

Responsibilities

• Conduct authorized penetration testing across Web applications, APIs, network infrastructure, and cloud environments.
• Perform reconnaissance, vulnerability discovery, exploitation, and post-exploitation activities within approved testing scopes.
• Identify vulnerabilities including authentication/authorization issues, injection, misconfiguration, access control weaknesses, insecure APIs, and other security flaws.
• Validate vulnerabilities through controlled proof-of-concept exploitation.
• Perform manual and automated security testing of web applications and APIs.
• Assess common application security vulnerabilities based on OWASP methodologies.
• Conduct testing beyond automated vulnerability scanning, including business logic and access-control testing.
• Review application behavior and identify potential attack paths.
• Analyze and prioritize findings based on technical severity, exploitability, and potential business impact.
• Prepare comprehensive penetration testing reports covering executive summary, technical findings, evidence / proof of concept, risk rating, business impact, remediation recommendations.
• Present technical findings to technical and non-technical stakeholders where required.
• Work with engineering and client teams to understand identified vulnerabilities.
• Perform remediation validation and retesting.
• Confirm whether vulnerabilities have been adequately addressed.
• Stay updated on emerging vulnerabilities, exploits, attack techniques, and offensive security tools.
• Continuously improve penetration testing methodologies and toolsets.
• Contribute to internal knowledge sharing, playbooks, and testing methodologies.
• Participate in client discussions to understand testing objectives, scope, and technical environments.
• Ensure penetration testing activities are delivered according to agreed scope, methodology, timeline, and reporting requirements.
• Maintain proper documentation of testing activities and evidence.

Skills

Penetration testing

Offensive security

Vulnerability assessment

Networking

Web technologies

OWASP Top 10

Manual testing

Client-facing

Education

Bachelor's degree

Bachelor's degree in CS/IT/Security

Tools

Burp Suite

Nmap

Metasploit

SQLMap

Wireshark

Gobuster

ffuf

Job description

Techconnect is seeking an experienced penetration tester to conduct authorized assessments of Web apps, APIs, networks, and cloud environments from Jakarta. You will perform reconnaissance, exploit vulnerabilities, and validate findings, delivering thorough reports and remediation guidance to clients.

The role requires 2–4 years of hands-on pentesting experience, strong knowledge of OWASP Top 10, and proficiency with Burp Suite, Nmap, and Metasploit. Relevant certifications are highly valued.