Deskripsi pekerjaan MS IT Security Engineer PT Bach Multi Global
Responsibilities:
- Conducting red-team activities — including penetration testing and adversary emulation — across the Protelindo environment
- Supporting application and system owners through remediation, and validating that identified findings have been effectively resolved
- Producing comprehensive security testing reports for each engagement
- Maintaining current awareness of emerging vulnerabilities, CVEs, and evolving attack techniques
- Supporting the SOC and detection engineering teams by developing structured security testing use cases mapped to MITRE ATT&CK TTPs, validating detection coverage and providing actionable feedback
- Continuously evaluating new tools and automation approaches to enhance and streamline the testing process
Requirement:
- Bachelor's degree in Cybersecurity, Computer Science, Information Technology, or a related field from a reputable university
- A minimum of 5 years of demonstrable experience in offensive security
- Solid working knowledge of the OWASP Top 10, OWASP Web Security Testing Guide (WSTG), and the MITRE ATT&CK framework
- Proven proficiency in identifying and exploiting common web application vulnerabilities, including but not limited to SQL injection, authentication and session management flaws, broken access control, insecure deserialization, and business logic flaws
- Hands-on proficiency with industry-standard offensive security tooling, including Kali Linux, Burp Suite, OWASP ZAP, Postman, and vulnerability scanning solutions
- Offensive Security Certified Professional (OSCP) certification is mandatory
- Experience with open-source adversary emulation frameworks (such as Atomic Red Team or similar) is preferred
