Penetration Tester

Techconnect.id· Group Companies
Apply Now ↗
📍 Jakarta, Jakarta, IndonesiaOther

About this role

  • Conduct authorized penetration testing across Web applications, APIs, network infrastructure, eternal and internal environments, cloud environments, and other applicable technology assets
  • Perform reconnaissance, vulnerability discovery, exploitation, and post-exploitation activities within approved testing scopes.
  • Identify vulnerabilities including authentication/authorization issues, injection, misconfiguration, access control weaknesses, insecure APIs, and other security flaws.
  • Validate vulnerabilities through controlled proof-of-concept exploitation.
  • Perform manual and automated security testing of web applications and APIs.
  • Assess common application security vulnerabilities based on OWASP methodologies.
  • Conduct testing beyond automated vulnerability scanning, including business logic and access-control testing.
  • Review application behavior and identify potential attack paths.
  • Analyze and prioritize findings based on technical severity, exploitability, and potential business impact.
  • Prepare comprehensive penetration testing reports covering executive summary, technical findings, evidence / proof of concept, risk rating, business impact, remediation recommendations
  • Present technical findings to technical and non-technical stakeholders where required.
  • Work with engineering and client teams to understand identified vulnerabilities.
  • Perform remediation validation and retesting.
  • Confirm whether vulnerabilities have been adequately addressed.
  • Stay updated on emerging vulnerabilities, exploits, attack techniques, and offensive security tools.
  • Continuously improve penetration testing methodologies and toolsets.
  • Contribute to internal knowledge sharing, playbooks, and testing methodologies.
  • Participate in client discussions to understand testing objectives, scope, and technical environments.
  • Ensure penetration testing activities are delivered according to agreed scope, methodology, timeline, and reporting requirements.
  • Maintain proper documentation of testing activities and evidence.

  • Bachelor's degree in Computer Science, Information Technology, Cybersecurity, Information Systems, or a related field.
  • Min. 2–4 years of hands-on experience in penetration testing, offensive security, vulnerability assessment, or a closely related cybersecurity role.
  • Demonstrable experience conducting penetration tests in a professional or client-facing environment.
  • Strong understanding of networking, operating systems, web technologies, authentication mechanisms, and common security vulnerabilities.
  • Strong understanding of penetration testing methodologies and vulnerability assessment.
  • Hands-on experience with web application penetration testing, API security testing, network penetration testing, vulnerability assessment, exploitation and proof-of-concept development
  • Familiarity with OWASP Top 10 and common web application vulnerabilities.
  • Working knowledge of Linux and Windows environments.
  • Understanding of TCP/IP, DNS, HTTP/HTTPS, VPN, firewalls, and network security concepts.
  • Experience with offensive security tools such as Burp Suite, Nmap, Metasploit, SQLMap, Wireshark, Gobuster/ffuf, or equivalent tools.
  • Ability to perform manual testing and not rely solely on automated scanners.
  • Ability to produce clear and technically accurate penetration testing reports.
  • Have at least one of these certifications:
    OSCP (Offensive Security Certified Professional)
    OSEP (Offensive Security Experienced Penetration Testers)
    OSWA (Offensive Security Web Assessor)
    OSWE (Offensive Security Web Expert)
    CREST CRT (CREST Registered Penetration Tester)
    CREST CCT INF (CREST Certified Tester Infrastructure)
    CREST CCT APP (CREST Certified Tester Application)
    GPEN (GIAC Penetration Tester)
    GXPN (GIAC Exploit Researcher and Advanced Penetration Tester)
    GWAPT (GIAC Web Application Penetration Tester)
    GCPN (GIAC Cloud Penetration Tester)
    eCPPT (eLearnSecurity Certified Professional Penetration Tester)
    eCPTX (eLearnSecurity Certified Penetration Tester eXtreme)
    eWPT (eLearnSecurity Web Application Penetration Tester)
    eWPTX (eLearnSecurity Web application Penetration Tester eXtreme)
    eMAPT (eLearnSecurity Mobile Application Penetration Tester)
    PNPT (Practical Network Penetration Tester)
    ECSA (EC-Council Certified Security Analyst)
    CPENT (Certified Penetration Testing Professional)
    LPT (Licensed Penetration Tester)
    CompTIA Pentest+
    HTB CPTS (HTB Penetration Testing Specialist Certification)
    CEH (Certified Ethical Hacker)
  • Private Health Insurance
  • Pension Plan
  • Training & Development
  • Performance Bonus

Frequently Asked Questions

Is the salary disclosed for the Penetration Tester position at Techconnect.id?
The salary for this Penetration Tester role at Techconnect.id is not publicly listed. Click "Apply Now" to learn more about the compensation package on their official careers page.
Where is the Penetration Tester position at Techconnect.id located?
This Penetration Tester role at Techconnect.id is based in Jakarta, Jakarta, Indonesia. The position is listed as on-site or hybrid. Check the full job description or apply directly to confirm the work arrangement.
Is the Penetration Tester role at Techconnect.id full-time or part-time?
This is listed as a Other position. It is posted as a Penetration Tester role in the Group Companies department at Techconnect.id.
Which team or department does the Penetration Tester at Techconnect.id belong to?
This Penetration Tester position is part of the Group Companies department at Techconnect.id. See the full job description for more information about the team structure and responsibilities.
How do I apply for the Penetration Tester position at Techconnect.id?
Click the "Apply Now" button on this page. You will be redirected to Techconnect.id's official application portal hosted on workable where you can submit your application directly.
When was the Penetration Tester job at Techconnect.id posted?
This Penetration Tester position at Techconnect.id was posted on Oct 2, 2026. Apply as soon as possible — early applications are often reviewed first.
Penetration Tester
Techconnect.id
Apply for this role ↗

You'll be redirected to Techconnect.id's official application page on workable.