Deskripsi pekerjaan Penetration Tester / Bug Hunter (immediate Joiner) PT Digital Tech Asia
Penetration Tester / Bug Hunter
Location: Jakarta, Indonesia
Employment Type: Contract (6 Months – Extendable)
Experience: Minimum 2 Years
Work Arrangement: Onsite
Availability: Immediate Joiner Preferred
Industry: Telecommunications
About the Role
We are looking for an experienced Penetration Tester / Bug Hunter to join our client's cybersecurity team at a leading telecommunications company.
The ideal candidate has hands-on experience in identifying security vulnerabilities, conducting penetration testing, performing vulnerability assessments, and participating in bug bounty programs.
You will be responsible for identifying potential security threats, exploiting vulnerabilities in a controlled environment, and providing recommendations to strengthen application and infrastructure security.
Key Responsibilities
- Conduct penetration testing on web applications, mobile applications, APIs, and network infrastructure.
- Identify, analyze, and validate security vulnerabilities.
- Perform vulnerability assessments and ethical hacking activities.
- Participate in bug bounty programs and demonstrate practical bug hunting experience.
- Exploit security vulnerabilities in authorized testing environments.
- Prepare detailed penetration testing reports, including findings, risk ratings, proof of concepts (PoCs), and remediation recommendations.
- Collaborate with development and IT teams to resolve identified vulnerabilities.
- Perform security retesting to validate remediation.
Requirements
- Minimum 2 years of experience in Penetration Testing, Bug Hunting, or Offensive Security.
- Proven hands-on experience as a Bug Bounty Hunter or Security Researcher.
- Strong knowledge of OWASP Top 10 and common web application vulnerabilities.
- Experience with vulnerability discovery and exploitation.
- Familiarity with tools such as:
Burp Suite
Nmap
Metasploit
OWASP ZAP
SQLmap
Kali Linux
- Understanding of vulnerabilities such as:
SQL Injection (SQLi)
Cross-Site Scripting (XSS)
IDOR / Broken Access Control
Server-Side Request Forgery (SSRF)
Authentication & Authorization vulnerabilities
Remote Code Execution (RCE)
- Ability to create technical reports and provide remediation recommendations.
- Strong analytical and problem-solving skills.
- Able to join immediately or with a short notice period.
