Deskripsi Pekerjaan
Assurity Trusted Solutions (ATS) is a wholly owned subsidiary of the Government Technology Agency (GovTech), dedicated to delivering secure and trusted digital solutions. We are currently seeking a highly skilled and motivated Penetration Tester / Red Team Engineer to join our elite security team. In this pivotal role, you will act as a cyber defender, identifying and exploiting vulnerabilities within our critical infrastructure before malicious actors can do so. You will be responsible for planning and executing sophisticated red team operations, including network attacks, web application penetration testing, and social engineering campaigns.
As part of GovTech's ecosystem, you will have the unique opportunity to work with cutting-edge technologies and methodologies to protect national assets. We value creativity, technical excellence, and a proactive approach to security. If you are passionate about offensive security and want to make a tangible impact on national digital resilience, we want to hear from you.
Tanggung Jawab
- Conduct comprehensive vulnerability assessments and penetration tests against enterprise systems and applications.
- Plan and execute complex Red Team operations to emulate real-world cyber threats and APT scenarios.
- Develop and utilize custom exploit scripts and tools to test system defenses and gain lateral movement.
- Perform social engineering campaigns, including phishing and physical security testing.
- Document findings with detailed technical reports and actionable remediation steps for stakeholders.
- Collaborate with Blue Team members to improve detection and response capabilities.
- Stay abreast of the latest security trends, exploit frameworks, and industry best practices.
Kualifikasi
- Bachelor’s degree in Computer Science, Cybersecurity, Information Technology, or a related field.
- Relevant professional certifications such as OSCP, CEH, CISSP, or CISM are highly preferred.
- Proven experience in penetration testing or Red Teaming, preferably within a government or large enterprise environment.
- Strong knowledge of network protocols, operating systems, and web technologies (OWASP Top 10).
- Proficiency in programming and scripting languages (e.g., Python, Bash, PowerShell, or Go).
- Familiarity with cloud security frameworks (AWS, Azure, or GCP) and container security.
- Excellent communication skills, with the ability to explain complex technical findings to non-technical stakeholders.