Cookies & analytics consent
We serve candidates globally, so we only activate Google Tag Manager and other analytics after you opt in. This keeps us aligned with GDPR/UK DPA, ePrivacy, LGPD, and similar rules. Essential features still run without analytics cookies.
Read how we use data in our Privacy Policy and Terms of Service.
🤖 15+ AI Agents working for you. Find jobs, score and update resumes, cover letter, interview questions, missing keywords, and lots more.
Thales • Special capital Region of Jakarta, Java, Indonesia
Role & seniority: Penetration Tester (2+ years of experience)
Location & work type: Jakarta, Indonesia | Full-time, on-site (local candidate preferred)
Stack/tools: Web apps, APIs, internal/external networks, cloud; Linux & Windows; Burp Suite, Nmap, Metasploit, Nessus/OpenVAS, Nikto; scripting in Python, Bash, PowerShell or JavaScript
Conduct authorized penetration testing across web apps, APIs, networks, cloud, and wireless as applicable; perform manual and automated testing; simulate real-world attacks
Analyze findings for business impact and risk, map to OWASP, MITRE ATT&CK, CVSS; provide prioritized remediation guidance
Produce high-quality reports and deliverables; present to technical teams and management; support remediation validation and retesting
Bachelor’s degree in Computer Science, Information Security, IT, or equivalent practical experience
2+ years as a penetration tester; strong networking (TCP/IP, DNS, HTTP/S, VPNs) and OS knowledge (Linux/Windows)
Web app security fundamentals and vulnerabilities (OWASP Top 10; authN/authZ flaws; injection, XSS, CSRF, SSRF; misconfigurations)
Experience with testing tools (Burp Suite, Nmap, Metasploit, Nessus/OpenVAS, Nikto) and scripting (Python, Bash, PowerShell, or JavaScript)
Cloud security testing (AWS/Azure/GCP) and mobile app security (Android/iOS)
Source code review; Secure SDLC/DevSecOps knowledge
Location: Jakarta, Indonesia Thales is a global technology leader trusted by governments, institutions, and enterprises to tackle their most demanding challenges. From quantum applications and artificial intelligence to cybersecurity and 6G innovation, our solutions empower critical decisions rooted in human intelligence. Operating at the forefront of aerospace and space, cybersecurity and digital identity, we’re driven by a mission to build a future we can all trust. Thales has been present in the Republic of Indonesia for 45 years in the defence, aerospace and space domains, delivering a wide range of civil and defence solutions that highlight our strong commitment to working with the Indonesian government and local stakeholders. In recent years, our innovative solutions in air traffic management systems and telecom satellites have further strengthened our presence in the country alongside our digital portfolio of solutions such as biometrics, data protection and cybersecurity now serving the needs of diverse customers in civil sectors. Job Purpose The Penetration Tester is responsible for identifying security weaknesses through authorized offensive security testing. The role involves conducting penetration tests across web & mobile applications, infrastructure, and networks, validating real-world risks, and providing actionable remediation guidance to improve the organization’s security posture. Key Responsibilities Penetration Testing & Security Assessment Conduct penetration testing on: Web applications APIs Internal and external networks Cloud environments Wireless networks (as applicable) Perform manual and automated security testing Simulate real-world attack scenarios to assess exploitability and impact Identify, validate, and exploit vulnerabilities in a controlled and ethical manner Participate in red team / purple team exercises (where applicable) Analysis & Risk Evaluation Analyze findings to determine: Business impact Risk severity Likelihood of exploitation Map vulnerabilities to industry standards (OWASP, MITRE ATT&CK, CVSS) Provide practical, prioritized remediation recommendations Reporting & Communication Produce clear, high-quality deliverables: Executive summaries Technical vulnerability reports Proof-of-concept evidence Present findings to technical teams, management, and stakeholders Support remediation validation and retesting Collaboration & Improvement Work with development, infrastructure, and security teams to improve security controls Contribute to tool development, scripts, and testing methodologies Stay current with emerging threats, vulnerabilities, and exploitation techniques Required Skills & Qualifications: Education Bachelor’s degree in: Computer Science Information Security Information Technology or equivalent practical experience (at least 2 years of experience as penetration tester) Technical Skills Strong understanding of: Networking (TCP/IP, DNS, HTTP/S, VPNs) Operating systems (Linux & Windows) Web application architecture Hands-on experience with vulnerabilities including: OWASP Top 10 Authentication & authorization flaws Injection, XSS, CSRF, SSRF Misconfigurations and insecure APIs Proficiency with penetration testing tools such as: Burp Suite Nmap Metasploit Nessus / OpenVAS Nikto Scripting / automation skills in at least one: Python Bash PowerShell JavaScript Preferred / Nice-to-Have: Experience with: Familiar with VAPT Framework OWASP WSTG,MSTG, OSSTM, etc. Cloud penetration testing (AWS, Azure, GCP) Mobile application security (Android / iOS) Source code review Knowledge of: Secure SDLC DevSecOps practices Industry certifications (one or more preferred): OSCP eWPT / eWPTX GWAPT CEH Experience in regulated industries (banking, aviation, government, healthcare) Personal Attributes Strong analytical and problem-solving skills Ethical mindset and respect for confidentiality Excellent written and verbal communication Ability to work independently and in teams Detail-oriented with a strong sense of responsibility At Thales, we’re committed to fostering a workplace where respect, trust, collaboration, and passion drive everything we do. Here, you’ll feel empowered to bring your best self, thrive in a supportive culture, and love the work you do. Join us, and be part of a team reimagining technology to create solutions that truly make a difference – for a safer, greener, and more inclusive world. Interested in finding out more about Thales and why you should join us? Say HI* to new career opportunities.