Cyber Security Specialist

Indivara Group; Indonesia; On-site; IDR 180,000,000 - 280,000,000; Full time

Job summary

Indivara Group is seeking a security specialist to monitor, analyze, and respond to incidents across applications, Linux servers, and cloud infrastructure. You will design controls using Secure-by-Design principles and collaborate with developers to review architecture and configurations.

You will support penetration testing, perform threat modeling, and improve logging and alerting with SIEM tools. Strong communication to both technical and non-technical stakeholders is required.

Qualifications

• Hands-on Linux experience is required for daily usage, permissions, networking, and log analysis.
• Experience supporting or conducting penetration testing or vulnerability validation (not limited to scanning).
• Understanding of web & API security fundamentals (OWASP Top 10).
• Exposure to Secure-by-Design principles within SDLC.
• Understanding attacker techniques and common attack paths.
• Experience analyzing vulnerabilities and distinguishing false positives vs real risks.
• Basic experience securing AWS resources (IAM usage, EC2/Linux hardening, logging).
• Understanding SIEM concepts (log sources, alerting, basic correlation).
• Basic knowledge of EDR/XDR and endpoint incident response concepts.
• Ability to clearly explain security risks and remediation to technical and non-technical stakeholders.

Responsibilities

• Monitor, analyze, and respond to security incidents across applications, Linux servers, and cloud infrastructure.
• Design and implement security controls using Secure-by-Design / Security-by-Default principles.
• Collaborate with developers to review architecture, configurations, and security-relevant code.
• Support and participate in penetration testing (web, API, infrastructure), including validation of findings and remediation.
• Perform basic threat modeling and risk assessment for new and existing systems.
• Improve security logging, monitoring, and alerting using SIEM and endpoint security tools.
• Participate in incident response, root cause analysis, and post-incident reviews.
• Maintain practical security guidelines and best practices for engineering teams.

Skills

Incident response

Threat modeling

Security communication

Analytical thinking

Ownership mindset

Working under pressure

Security best practices

Education

OSCP

CEH

Tools

Burp Suite

Metasploit

Nessus

Wazuh / ELK / Splunk

SOAR

Python/Bash scripting

Job description

• Monitor, analyze, and respond to security incidents across applications, Linux servers, and cloud infrastructure.
• Design and implement security controls using Secure-by-Design / Security-by-Default principles.
• Collaborate with developers to review application architecture, configurations, and security-relevant code.
• Support and participate in penetration testing (web, API, infrastructure), including validation of findings and remediation.
• Perform basic threat modeling and risk assessment for new and existing systems.
• Improve security logging, monitoring, and alerting using SIEM and endpoint security tools.
• Participate in incident response, root cause analysis, and post-incident reviews.
• Maintain practical security guidelines and best practices for engineering teams.

Mandatory Requirements

• Hands-on Linux experience (daily usage, basic processes, permissions, networking, and log analysis).
• Experience supporting or conducting penetration testing or vulnerability validation (not limited to scanning only).
• Understanding of web & API security fundamentals (OWASP Top 10).
• Exposure to applying Secure-by-Design principles within SDLC.
• Understanding of attacker techniques and common attack paths.
• Experience analyzing vulnerabilities and distinguishing false positives vs real risks.
• Basic experience securing AWS resources (IAM usage, EC2/Linux hardening basics, logging).
• Understanding of SIEM concepts (log sources, alerting, basic correlation).
• Basic knowledge of EDR/XDR and endpoint incident response concepts.
• Ability to clearly explain security risks and remediation to technical and non-technical stakeholders.

Preferred (Nice to Have)

• Hands-on experience with pentest or security tools (Burp Suite, Metasploit, Nessus, etc.).
• Exposure to SOAR or incident response automation; scripting with Python/Bash.
• Experience with SIEM/HIDS platforms (Wazuh, ELK, Splunk, or equivalent).
• Container or Kubernetes security exposure.
• Familiarity with ISO 27001 controls or security compliance.
• Relevant certifications (OSCP, CEH, GWAPT, Security+, or equivalent).
• Experience in fintech, banking, or high-risk transaction environments.

Soft Skills

• Strong analytical and problem-solving mindset.
• Comfortable working under pressure during incidents.
• Good communication with developers and operations teams.
• High ownership and continuous learning mindset.