Cyber Security Specialist - Red/Blue Team, VAPT & IR

MAG; Jakarta Pusat; On-site; IDR 167,400,000 - 312,480,000; Full time

Job summary

MAG Insurance is seeking a seasoned Cyber Security professional to analyze SOC reports, logs from firewalls, and security devices. The role will optimize NGFW/WAF configurations, implement DLP, and conduct incident response simulations, phishing awareness, and internal pentesting.

Requires CEH/Security+ and 3+ years in security, with strong English skills. Candidate will work on safeguarding endpoints/servers and supporting regulator/compliance requirements, using tools like Wazuh, ArcSight,

Qualifications

• 1. S1 (IT Major Preferred).
• 2. Experienced in Cyber Security (VAPT, Threat Hunting, Incident Handler, Secure Code).
• 3. CEH, Security+ Certification.
• 4. Minimum experience 3 years.
• 5. Good English language skills spoken/written; Red/Blue team experience.
• 6. Proficiency with SIEM, VAPT, SAST/DAST, DLP, patching, NAC, EDR, and WAF tools.

Responsibilities

• Analyse reports from Managed SOC and security devices.
• Analyse logs from Firewalls and other Security devices.
• Optimize configuration of NGFW, WAF, Anti Spam, Anti Virus/EDR/XDR.
• Implement DLP Tool as regulator/CIS requires.
• Perform Incident Response Simulation & Testing.
• Perform Phishing Simulation & User Security Awareness.
• Conduct internal pentest or assist external pentest.
• Perform baseline checks on endpoints and servers.

Skills

Cyber Security

VAPT

Threat Hunting

Incident Handling

Red Team / Blue Team

English proficiency

Python/PowerShell

Education

Bachelor's degree in IT (S1)

Tools

SIEM (Wazuh/ArcSight)

VAPT tools (Tenable/Rapid7)

SAST/DAST (Burp Suite, SonarQube)

DLP tools (Forcepoint/Purview)

Patching tools (ManageEngine/Kaseya)

NAC tools (EasyNAC)

EDR/NGFW/WAF (CrowdStrike, Palo Alto)

WAF (Cloudflare/Imperva)

Wireshark/Kali Linux

Identity/Asset Inventory tools (CyberArk/Lansweeper)

Job description

MAG Insurance is seeking a seasoned Cyber Security professional to analyze SOC reports, logs from firewalls, and security devices. The role will optimize NGFW/WAF configurations, implement DLP, and conduct incident response simulations, phishing awareness, and internal pentesting.

Requires CEH/Security+ and 3+ years in security, with strong English skills. Candidate will work on safeguarding endpoints/servers and supporting regulator/compliance requirements, using tools like Wazuh, ArcSight,