Penetration Tester

About the role

We are looking for a passionate and experienced Penetration Tester who lives and breathes security. Someone who is a true nerd at heart, always learning, always hacking, always curious about how things break.

What you will do

• Perform penetration tests on web applications, APIs, networks, and on-site IT infrastructure
• Identify vulnerabilities, map attack paths, and demonstrate real-world impact
• Write clear, actionable reports that both technical teams and IT managers can understand
• Present findings to clients and explain complex vulnerabilities in plain language
• Contribute to red teaming engagements and security assessments

What we are looking for

• Proven experience in penetration testing, this is not an entry-level position
• Certifications: CREST, OSCP or similar at that level or higher
• All-round skills: web, network, infrastructure, and on-site IT assessments
• Passion for hacking: you do CTFs, read security research, tinker with tools in your free time
• Willing to learn: new attack techniques, new tools, new industries, you never stop
• Soft skills: ability to explain complex attack paths and vulnerabilities to IT managers and non-technical stakeholders
• English is mandatory (all reporting and client communication is in English)

Nice to have

• Experience with red teaming or adversary simulation
• Knowledge of cloud security (AWS, Azure, GCP)
• Active security community involvement (blogs, talks, open source)
• Additional certifications (OSWE, CRTO, BSCP, eCPTX)

What we offer

• Work on challenging, real-world engagements across industries and locations
• On-site in our Bali office, must be willing to travel for on-site client projects
• Budget for certifications, training, and conference attendance
• A team that values the Sawah Code: Simply Hacking and Enjoy!