We’re looking for experienced IT Security professionals to join our client’s team! ▸ Open for Indonesian Citizens Only ▸ Contract-Based ▸ Banking Industry Application Security / DevSecOps Min. 4 years of experience in Application Security, Secure Code Review, - DevSecOps, or Cyber Security. Experienced in Secure Code Review for web, mobile, and API applications. Familiar with SAST, DAST, OWASP Top 10, Secure Coding, and CI/CD security integration. ️ SOC / Security Monitoring Min. 4 years of experience in Cyber Security, SOC, Security Monitoring, SIEM, or Endpoint Security. Hands-on experience with SIEM platforms such as QRadar, Splunk, Sentinel, ArcSight, or ELK. Experienced in security alert triage, log analysis, threat detection, and incident investigation. VAPT / Penetration Testing Min. 4 years of experience in VAPT or Cyber Security. Experienced in Vulnerability Assessment and Penetration Testing for infrastructure, networks, web applications, APIs, and operating systems. Proficient with security tools such as Nessus, Burp Suite, Nmap, OWASP ZAP, or Metasploit. Interested? Send your CV to raffi.d@avowstech.com with subject: Position - Name - HackPoint

Persyaratan Utama (Must-Have): Pengalaman: Minimal 3 tahun di bidang Penetration Testing / Offensive Security. (Fresh graduate diperbolehkan melamar hanya jika memiliki pengalaman konkret dalam melakukan pentest pada gRPC). Keahlian Khusus: Pengalaman praktis dalam melakukan security assessment dan penetration testing pada gRPC / Protocol Buffers (protobuf). Keamanan API & Web: Paham mendalam mengenai pengujian keamanan Web Application, REST API, GraphQL, serta arsitektur Microservices. Tools Pentest: Terbiasa menggunakan tools seperti Burp Suite (termasuk ekstensi gRPC), Protoc, Postman, Wireshark, atau tools kustom berbasis Python/Go. Pemahaman Logika Bisnis: Mampu mengidentifikasi kerentanan spesifik gRPC seperti broken authentication/authorization, rate limiting bypass, data exposure, hingga denial of service. Pelaporan: Mampu menyusun laporan temuan kerentanan (remediation report) secara jelas dan memberikan rekomendasi perbaikan teknis kepada tim developer. Nilai Tambah (Nice-to-Have): Memiliki sertifikasi keamanan yang diakui (misal: OSCP, OSWE, CRTP, CEH Master, atau sejenisnya). Memiliki riwayat pelaporan bug (Bug Bounty / Hall of Fame) atau portfolio pentest gRPC yang bisa dibuktikan (misal: write-up, repositori GitHub, atau laporan uji coba). Mampu melakukan code review (membaca kode sumber Go, Java, Python, atau Node.js yang menggunakan gRPC). Kirim CV to : andreas@hackpoint.id