Cybersecurity

PT Indivara Sejahtera Sukses Makmur; Jakarta Utara; On-site; IDR 210,000,000 - 420,000,000; Full time

Job summary

Indivara seeks an experienced cybersecurity professional to monitor, analyze, and respond to security incidents across applications, Linux servers, and cloud infrastructure. You will design security controls using Secure-by-Design and collaborate with developers to review architecture and code.

You will support penetration testing, perform threat modeling, and improve logging/alerting with SIEM tools. The role also covers incident response and maintaining practical security guidelines for

Qualifications

• Minimum 5 years of cybersecurity experience is required.
• Hands-on Linux daily usage including processes, permissions, networking and log analysis.
• Experience supporting or conducting penetration testing or vulnerability validation.
• Strong understanding of web and API security fundamentals (OWASP Top 10).
• Exposure to Secure-by-Design principles within SDLC.
• Understanding attacker techniques and common attack paths.
• Experience securing AWS resources (IAM, EC2, logging).
• Understanding SIEM concepts (log sources, alerting, correlation).
• Knowledge of EDR/XDR and endpoint incident response concepts.

Responsibilities

• Monitor, analyze, and respond to security incidents across applications, Linux servers, and cloud infrastructure.
• Design and implement security controls using Secure-by-Design / Security-by-Default principles.
• Collaborate with developers to review application architecture, configurations, and security-relevant code.
• Support and participate in penetration testing (web, API, infrastructure), including validation of findings and remediation.
• Perform basic threat modeling and risk assessment for new and existing systems.
• Improve security logging, monitoring, and alerting using SIEM and endpoint security tools.
• Participate in incident response, root cause analysis, and post-incident reviews.
• Maintain practical security guidelines and best practices for engineering teams.

Skills

Cybersecurity

Linux

Penetration testing

OWASP Top 10

Secure-by-Design

Threat modelling

AWS security

SIEM

EDR/XDR

Incident response

Job description

Monitor, analyze, and respond to security incidents across applications, Linux servers, and cloud infrastructure. Design and implement security controls using Secure-by-Design / Security-by-Default principles. Collaborate with developers to review application architecture, configurations, and security-relevant code. Support and participate in penetration testing (web, API, infrastructure), including validation of findings and remediation. Perform basic threat modeling and risk assessment for new and existing systems. Improve security logging, monitoring, and alerting using SIEM and endpoint security tools. Participate in incident response, root cause analysis, and post-incident reviews. Maintain practical security guidelines and best practices for engineering teams.

Key responsibilities

Monitor, analyze, and respond to security incidents across applications, Linux servers, and cloud infrastructure

Design and implement security controls using Secure-by-Design / Security-by-Default principles

Collaborate with developers to review application architecture, configurations, and security-relevant code

Support and participate in penetration testing (web, API, infrastructure), including validation of findings and remediation

Perform basic threat modeling and risk assessment for new and existing systems

Improve security logging, monitoring, and alerting using SIEM and endpoint security tools

Participate in incident response, root cause analysis, and post-incident reviews

Maintain practical security guidelines and best practices for engineering teams

About you

Min. 5 years experience in Cybersecurity

Hands-on Linux experience (daily usage, basic processes, permissions, networking, and log analysis)

Experience supporting or conducting penetration testing or vulnerability validation (not limited to scanning only)

Understanding of web & API security fundamentals (OWASP Top 10)

Exposure to applying Secure-by-Design principles within SDLC

Understanding of attacker techniques and common attack paths

Experience analyzing vulnerabilities and distinguishing false positives vs real risks

Basic experience securing AWS resources (IAM usage, EC2/Linux hardening basics, logging)

Understanding of SIEM concepts (log sources, alerting, basic correlation)

Basic knowledge of EDR/XDR and endpoint incident response concepts

Indivara is a holding company of several IT companies in South East Asia which focus on providing Applications Platform and IT Consulting and Services in Asia Pacific regions. The strength of our solutions is the combination of product and people.

Indivara is a holding company of several IT companies in South East Asia which focus on providing Applications Platform and IT Consulting and Services in Asia Pacific regions. The strength of our solutions is the combination of product and people.