Senior Red Team Penetration Tester

PT IDstar Cipta Teknologi (IDstar); Jakarta Pusat; On-site; IDR 240,000,000 - 360,000,000; Full time

Job summary

PT IDstar Cipta Teknologi (IDstar) is seeking an experienced IT Security Engineer (Red Team) to perform penetration testing, adversary simulation, and security assessments across enterprise environments in Jakarta. The ideal candidate has hands-on offensive security experience and strong knowledge of OWASP Top 10 and OWASP WSTG.

Responsibilities include conducting Red Team exercises, identifying vulnerabilities, creating PoC exploits, and assisting owners in remediation.

Qualifications

• Bachelor's degree in cybersecurity, CS, IT, or related field.
• At least 3 years in offensive security, penetration testing, or red team.
• Strong knowledge of OWASP Top 10 and OWASP WSTG.
• OSCP certification is mandatory.

Responsibilities

• Conduct penetration testing, Red Team exercises, and security assessments.
• Identify, validate, and report security vulnerabilities.
• Create Proof of Concept (PoC) exploits and security assessment reports.
• Support application and system owners in validating and remediating security findings.
• Perform retesting after vulnerabilities have been fixed.
• Stay updated with the latest vulnerabilities, CVEs, and attack techniques.
• Explore new security tools and automation to improve testing processes.

Skills

Offensive Security

Penetration Testing

Red Team

Kali Linux

Burp Suite

OWASP Top 10

OWASP WSTG

Vulnerability Assessment

Reporting

Communication

Education

Bachelor's degree in Cybersecurity/CS/IT

Tools

Kali Linux

Burp Suite

OWASP ZAP

Postman

Vulnerability Scanners

Job description

PT IDstar Cipta Teknologi (IDstar) is seeking an experienced IT Security Engineer (Red Team) to perform penetration testing, adversary simulation, and security assessments across enterprise environments in Jakarta. The ideal candidate has hands-on offensive security experience and strong knowledge of OWASP Top 10 and OWASP WSTG.

Responsibilities include conducting Red Team exercises, identifying vulnerabilities, creating PoC exploits, and assisting owners in remediation.