Sentrabyte Digital Solusi

Role Description We are actively hiring an Offensive Security Engineer to work on real-world security testing and automation across modern systems. This role is ideal for candidates with a strong foundation in penetration testing who want to expand into automation, tooling, and advanced offensive security practices. You will work on practical security challenges — not just scanning tools — and contribute to improving security at scale. Responsibilities - Perform security testing across web applications, APIs, and infrastructure - Develop scripts and tools (Python, Bash, etc.) to automate testing workflows - Identify, validate, and analyze vulnerabilities - Support internal offensive security initiatives and tooling - Collaborate with engineering teams to improve system security - Contribute to improving detection and response capabilities Qualifications - 2–5 years of experience in penetration testing or security engineering - Basic to intermediate scripting skills (Python, Bash, or similar) - Strong understanding of web security (OWASP Top 10 and beyond) - Familiarity with Linux systems and networking concepts - Strong analytical and problem-solving mindset Requirements - Nice to Have - Experience building security tools or automation - Exposure to cloud security or DevSecOps environments - Experience with real-world testing or bug bounty programs Work Setup - Full-time - Remote (Worldwide) Company Description Join our team at Sentrabyte Digital Solusi and embark on a journey of growth and innovation.

Role Description We are actively hiring a Senior Red Team Operator to execute real-world enterprise attack simulations. This role is built for operators who go beyond tools — individuals who can gain initial access, escalate privileges, move laterally, and demonstrate real business impact. You will work on advanced Red Team engagements that simulate real adversaries across enterprise environments — not checklist-based testing. Responsibilities - Lead and execute end-to-end Red Team operations across enterprise environments - Perform advanced exploitation including initial access, privilege escalation, and lateral movement - Conduct Active Directory attacks and post-exploitation activities - Develop realistic attack chains demonstrating business impact - Achieve and validate OS-level access (SYSTEM / root) - Produce clear technical reports with actionable remediation insights Qualifications - 5+ years of experience in offensive security, Red Team, or advanced penetration testing - Proven ability to achieve OS-level access (RCE / shell) in real-world environments - Strong experience executing multi-stage attack chains - Deep understanding of post-exploitation techniques - Experience with Active Directory attacks (Kerberoasting, DCSync, etc.) is a strong plus - Strong attacker mindset — not limited to automated tools Nice to Have - OSCP, OSWE, or equivalent certifications - Experience in enterprise Red Team engagements - Background in internal network or Active Directory exploitation Work Setup - Full-time - Remote (Worldwide) Note We are actively reviewing candidates and fast-tracking strong applicants. Company Description Join our team at Sentrabyte Digital Solusi and embark on a journey of growth and innovation.

Role Description We are actively hiring a Penetration Tester to work on real-world security testing across web, API, and internal environments. This role is ideal for candidates with solid fundamentals in offensive security who want to grow into advanced exploitation and Red Team operations. You will work on practical engagements — not just automated scanning — and gain exposure to real attack scenarios. Responsibilities - Perform penetration testing across web applications, APIs, and internal systems - Identify, validate, and document security vulnerabilities - Assist in exploitation activities and basic attack chains - Provide clear remediation recommendations - Collaborate with team members on security assessments Qualifications - 2–5 years of experience in penetration testing or application security - Strong understanding of web vulnerabilities (OWASP Top 10 and beyond) - Familiarity with tools such as Burp Suite, Nmap, and Metasploit - Basic understanding of networking and Linux systems - Strong interest in offensive security and Red Team practices Requirements - Experience in bug bounty or real-world testing engagements (Nice to Have) - Basic scripting skills (Python, Bash, or similar) (Nice to Have) - Exposure to internal/network penetration testing (Nice to Have) Work Setup - Full-time - Remote (Worldwide) Company Description Join our team at Sentrabyte Digital Solusi and embark on a journey of growth and innovation.

Elite Red Team Position This is not a mid-level role. This is not for lab-only testers. This is not compliance penetration testing. We are looking for operators who have personally executed real exploitation during professional engagements, not just vulnerability identification. Core Responsibilities Lead and execute advanced Red Team operations against enterprise environments. Simulate real-world attackers by performing: • Initial access exploitation• Privilege escalation• Credential harvesting• Active Directory attacks• Lateral movement across systems• Persistence techniques Achieve validated SYSTEM (Windows) or root (Linux) compromise during authorized Red Team exercises. Demonstrate realistic business impact through controlled exploitation scenarios. Document attack paths and produce clear technical reports describing: • exploitation methodology• attack chain progression• affected systems• business risk and remediation recommendations Mandatory Technical Requirements Candidates must demonstrate proven offensive security capability, including: • At least 10 real OS-level shell or RCE compromises personally executed during authorized engagements. • Experience executing multi-stage attack chains, including: Initial accessPrivilege escalationCredential harvestingLateral movement • Strong post-exploitation capability beyond initial shell access. • Practical experience exploiting enterprise Active Directory environments. Active Directory Attack Experience Candidates must demonstrate familiarity with common enterprise AD attack paths, including: KerberoastingAS-REP RoastingACL abuseNTLM relay attacksDCSync attacks Understanding of privilege escalation paths within Active Directory is expected. Post-Exploitation Capability Strong experience performing post-exploitation activities such as: • system enumeration• credential extraction• privilege escalation• lateral movement• persistence mechanisms Operators must be capable of continuing exploitation after initial access is obtained. Important Clarification The required exploitation experience must come from authorized professional environments, including: • enterprise penetration testing engagements• Red Team adversary simulation exercises• internal enterprise testing infrastructure The following do NOT count toward the required exploitation experience: HackTheBoxTryHackMeCTF challengesbasic lab environments Candidates must demonstrate real exploitation depth, not platform achievements. Technical Validation Process All candidates undergo a structured technical validation process before interviews. Initial evaluation includes: • written technical discussion• exploit chain explanations• scenario-based technical responses Voice or video interviews are conducted only after the technical validation stage is successfully completed. Required Experience Minimum 5+ years of hands-on offensive security experience, including professional work in: • Red Team operations• enterprise penetration testing• adversary simulation engagements Strong understanding of: • Active Directory attack paths• Kerberos abuse techniques• privilege escalation methods• credential harvesting techniques• lateral movement strategies Communication Requirements Strong written and spoken English communication skills. Candidates must be able to clearly explain: • the vulnerability exploited• how exploitation was performed• the resulting system compromise• the potential business impact Application Requirements Serious applicants only. Applications should include: • descriptions of real exploitation scenarios• technical write-ups (if available)• GitHub or research links (optional) Candidates unable to demonstrate real exploitation depth will not proceed. How to Apply Apply through our careers page: https://sentrabytedigitalsolusi.com/careers or send your application to: hr@sentrabytedigitalsolusi.com Before applying, please ensure you can clearly describe: 1. At least one exploitation scenario where you achieved OS-level shell access. 2. The exact access vector used. 3. The privilege level obtained. 4. Post-exploitation actions performed. Applications without technical detail will not be reviewed.