Penetration Tester

Job Description:

We are looking for a skilled and motivated Penetration Tester to join our cybersecurity team. The successful candidate will be responsible for identifying security vulnerabilities, assessing risks, and providing actionable recommendations to improve the security posture of our clients' IT infrastructure and applications.

Key Responsibilities:

• Conduct penetration testing and vulnerability assessments on Web and Mobile Applications, APIs, and IT infrastructure.

• Perform security testing using both automated tools and manual testing techniques.

• Perform vulnerability analysis, exploitation, and post-exploitation activities within an authorized testing scope.

• Prepare comprehensive penetration testing reports, including findings, evidence, risk ratings, and remediation recommendations.

• Collaborate with internal security teams and clients to communicate technical findings and recommend appropriate mitigation strategies.

• Ensure all security testing activities comply with agreed scopes, rules of engagement, and applicable security standards.

Requirements:

• Bachelor's degree in Information Technology, Computer Science, Cybersecurity, or a related field. Equivalent practical experience is also considered.

• Good understanding of networking concepts, TCP/IP, DNS, HTTP/HTTPS, routing, and common network services.

• Hands-on experience with penetration testing tools such as Burp Suite, Nmap, Metasploit, and vulnerability scanners.

• Knowledge of common security vulnerabilities, exploitation techniques, authentication mechanisms, and access control weaknesses.

• Ability to analyze technical findings, assess risk, and provide practical remediation recommendations.

• Strong analytical, problem-solving, documentation, and communication skills.

• Able to work independently and collaboratively within a team.

• Professional integrity and a strong commitment to ethical hacking practices.

• Relevant certifications such as eJPT, PNPT, OSCP, CEH, or equivalent certifications are an advantage.

• Experience working in a cybersecurity service provider, consulting firm, or Managed Security Service Provider (MSSP) is a plus.

What We Offer:

- Opportunities to work on real-world cybersecurity engagements across different environments.

- Exposure to diverse IT infrastructure, applications, and security technologies.

- Opportunities for professional development and cybersecurity certification.

- A collaborative environment focused on continuous learning and technical growth.

Application Instructions:

Applicants are required to complete the following pre-qualification questionnaire as part of the recruitment process. Please ensure that all answers are accurate and reflect your actual skills, experience, and technical knowledge.

https://s.magseras.co.id/index.php/119311?newtest=Y&lang=id

Thank you for your interest in joining our team.