penetration TesterXendit

Mission
Our vision is to build digital infrastructure for Southeast Asia, supporting customers from fast-growing startups, NGOs to multinational enterprises such as Traveloka, Lazada, Garuda Indonesia, Suzuki, and Ciputra.
Your mission as part of the Xendit information security team is to discover the various security vulnerabilities in our environment and provide technical consultation on how to protect our business from these vulnerabilities exploitation.
Responsibilities
Perform penetration test for web applications, network, endpoints and cloud infrastructure
Triage vulnerabilities findings to product engineers and help them understand the vulnerabilities
Be a security subject matter expert and answer security questions from product engineers
Improve security testing process to be more effective and efficient
Ensure we met compliance requirements related to security testing
Proactively identify and reduce security risks
Do whatever it takes to make Xendit succeed
You may be a good fit if
You have a bachelor's degree in Computer Science. An equivalent combination of education and work experience may be taken into consideration in lieu of a degree
You have 2 - 4 years of relevant IT experience, with a minimum of 2-years hands-on as penetration tester or application security engineer
You are familiar with financial industry and the security risks associated with it
You are familiar with common security controls and security flaws for modern web applications, APIs and cloud infrastructure
You understand the OWASP testing methodology and have knowledge of penetration testing tools
You think like an attacker but humble enough to help developers understand about risk and mitigation control of a vulnerability
You have exceptional verbal and written communication skills in English
Bonus point if you are
OSCP/OSCE certified
You know security testing requirements of common security regulations such as PCI DSS and ISO27001
Xendit

Manila City, Metro Manila
Permanent
Full-time