IT Security Engineer Red Team  

• Lead and execute penetration test activities for mobile application, web application and infrastructure of the company
• Lead, manage, and review all penetration test projects in the company (internal and external)
• Generate summary and detailed report for penetration test activity
• Responsible for handling the vulnerability management of company's products and services
• Review, validate, and manage bug bounty program
• Responsible to manage and review the vulnerability found from the SAST and/or DAST tool
• Lead the awareness program of secure coding practices for IT developer/engineer
• Responsible as one of the Subject Matter Expert (SME) for security and participate in regular discussion with other developer/engineer to give security insights and feedbacks

This position will be hired for contract 1 year

Currently we are hybrid working : 3 days WFO and 2 days WFH

• Minimum 1 - 2 years of experience in cyber security
• Minimum 1 - 2 years of experience in penetration testing (web application/ infrastructure/ mobile application)
• Experienced with risk scoring standard (OWASP Risk Rating, CVSS)
• Experienced with open source technologies
• Experienced in using versioning control
• Experienced in working with SAST and DAST tools
• Familiar with manual penetration testing (SQL/NoSql Injection, XSS, Business logic vulnerabilities, etc)
• Familiar with MITRE ATT&CK Framework
• Familiar with basic scripting and programming (Python, Ruby, Golang, Bash/Shell scripting, etc.)
• Familiar with manual code review and secure coding practices
• Familiar with CI/CD pipeline process
• Familiar with security defense technology (such as SIEM, SOAR, Firewall, etc)
• Familiar with cloud environment services (GCP, AWS)
• Have been participated in Bug Hunting and/or CTF Competition is an advantage
• Good in written, verbal communication and presentation skills
• Desired Certifications: OSCP, LPT (Master), GPEN, CPENT, CREST Registered Penetration Tester, CSSLP, CEH, etc.