We’re looking for experienced IT Security professionals to join our client’s team!
▸ Open for Indonesian Citizens Only
▸ Contract-Based
▸ Banking Industry

Application Security / DevSecOps

• Min. 4 years of experience in Application Security, Secure Code Review, - DevSecOps, or Cyber Security.
• Experienced in Secure Code Review for web, mobile, and API applications.
• Familiar with SAST, DAST, OWASP Top 10, Secure Coding, and CI/CD security integration.

️ SOC / Security Monitoring

• Min. 4 years of experience in Cyber Security, SOC, Security Monitoring, SIEM, or Endpoint Security.
• Hands-on experience with SIEM platforms such as QRadar, Splunk, Sentinel, ArcSight, or ELK.
• Experienced in security alert triage, log analysis, threat detection, and incident investigation.

VAPT / Penetration Testing

• Min. 4 years of experience in VAPT or Cyber Security.
• Experienced in Vulnerability Assessment and Penetration Testing for
  infrastructure, networks, web applications, APIs, and operating systems.
• Proficient with security tools such as Nessus, Burp Suite, Nmap, OWASP ZAP, or Metasploit.

Interested? Send your CV to raffi.d@avowstech.com with subject: Position - Name - HackPoint

Persyaratan Utama (Must-Have):

Pengalaman: Minimal 3 tahun di bidang Penetration Testing / Offensive Security.
(Fresh graduate diperbolehkan melamar hanya jika memiliki pengalaman konkret dalam melakukan pentest pada gRPC).

Keahlian Khusus: Pengalaman praktis dalam melakukan security assessment dan penetration testing pada gRPC / Protocol Buffers (protobuf).

Keamanan API & Web: Paham mendalam mengenai pengujian keamanan Web Application, REST API, GraphQL, serta arsitektur Microservices.

Tools Pentest: Terbiasa menggunakan tools seperti Burp Suite (termasuk ekstensi gRPC), Protoc, Postman, Wireshark, atau tools kustom berbasis Python/Go.

Pemahaman Logika Bisnis: Mampu mengidentifikasi kerentanan spesifik gRPC seperti broken authentication/authorization, rate limiting bypass, data exposure, hingga denial of service.

Pelaporan: Mampu menyusun laporan temuan kerentanan (remediation report) secara jelas dan memberikan rekomendasi perbaikan teknis kepada tim developer.

Nilai Tambah (Nice-to-Have):

Memiliki sertifikasi keamanan yang diakui (misal: OSCP, OSWE, CRTP, CEH Master, atau sejenisnya).

Memiliki riwayat pelaporan bug (Bug Bounty / Hall of Fame) atau portfolio pentest gRPC yang bisa dibuktikan (misal: write-up, repositori GitHub, atau laporan uji coba).

Mampu melakukan code review (membaca kode sumber Go, Java, Python, atau Node.js yang menggunakan gRPC).

Kirim CV to : andreas@hackpoint.id

HackPoint × KTCG Beginner CTF 2026 adalah kolaborasi antara HackPoint dan KTCG Community yang dirancang sebagai wadah bagi peserta untuk mengasah kemampuan fundamental cybersecurity melalui pendekatan Capture The Flag (CTF).

Dalam CTF ini, peserta ditantang untuk menyelesaikan berbagai challenge yang mencakup beberapa kategori keamanan, sekaligus memahami konsep, vulnerability, methodology, dan teknik exploitation yang digunakan untuk memperoleh flag.

Official Writeup

Untuk dokumentasi lengkap mengenai challenge dan pembahasannya, silakan akses:
https://github.com/KTCGCommunity/Beginner-CTF-2026-KTCG-Community-x-HackPoint

Di repository tersebut tersedia berbagai challenge dan materi yang dapat digunakan sebagai bahan pembelajaran maupun latihan mandiri.

Dokumentasi pembahasan dan writeup tambahan juga tersedia melalui Google Docs (dibuat oleh AeryV):

https://docs.google.com/document/d/1u54CSQ0wtX5jdVMdY0Wgw3QlXQg_6qfZ3xSnrIuMwAQ/edit?tab=t.0

Collaboration

Terima kasih kepada KTCG Community atas kolaborasinya dalam menghadirkan pengalaman belajar cybersecurity yang accessible bagi para beginner.

Semoga writeup ini tidak hanya membantu peserta memahami cara mendapatkan flag, tetapi juga memahami mengapa vulnerability tersebut dapat terjadi dan bagaimana cara mitigasinya.

AI Engineering from Scratch

503 lessons. 20 phases. Every algorithm built from raw math before a single framework gets imported.

link text

Maintained by Mindwalker.ai and contributors. Run on your own machine.

Welcome to HackPoint Community

Good evening, everyone!

Welcome to HackPoint Community — a community built for people who are passionate about cybersecurity, technology, hacking, learning, and making an impact.

It is a great honor to have all of you here today — cybersecurity professionals, ethical hackers, security researchers, students, technology enthusiasts, industry leaders, and everyone who wants to learn and contribute to a safer digital world.

HackPoint is more than just a community.

HackPoint is a place where we learn together, hack together, defend together, create together, and ultimately, make an impact together.

In cybersecurity, the landscape is changing faster than ever.

We are entering an era where AI is becoming autonomous, attacks are becoming faster and more sophisticated, and the traditional boundaries of cybersecurity are disappearing.

That means we cannot simply wait for threats to happen.

We need to continuously learn, experiment, collaborate, and innovate.

And that is exactly what HackPoint is here for.

Whether you are just starting your cybersecurity journey or you are already an experienced security professional, there is a place for you in HackPoint.

Here, we believe that knowledge should not be kept within individuals or organizations.

Knowledge should be shared. Skills should be developed. Ideas should be challenged. And technology should be used to create positive impact.

So, I invite everyone here today:

Ask questions.
Share your knowledge.
Challenge assumptions.
Build connections.
Learn from each other.

Because the strongest cybersecurity community is not built by one person.

It is built by all of us.

This is HackPoint.

Hack. Learn. Defend. Impact.

Welcome to the community.

Welcome to HackPoint.

And let's build a safer digital future — together.

Thank you, and once again, welcome to HackPoint Community!