DevSecOps (Network & IoT/Embedded Security)

Maestronic; Denpasar; On-site; IDR 240,000,000 - 420,000,000; Full time

Benefits offered by this job

Flat hierarchy

Collaborative environment

Impactful projects

Job summary

Maestronic is seeking a hands-on Security Analyst Engineer to protect our network, cloud, and connected-device ecosystem in Bali. You will assess, monitor, and harden infrastructure and IoT/embedded devices such as cameras and sensors, working with infra, development, and product teams to bake security into our products.

Responsibilities include designing security measures across systems, monitoring events, conducting vulnerability tests, and enforcing secure architectures with firewall and IAM

Qualifications

• Typically 5+ years in software, systems, or cybersecurity roles.
• Bachelor’s degree in CS, Cybersecurity or related field preferred.

Responsibilities

• Design, implement, and maintain security across infrastructure, cloud, and embedded systems.
• Monitor, triage, and respond to security events across networks and IoT environments.
• Run vulnerability assessments and remediation tracking to closure.
• Review network architecture, firewalls, VPNs, and secure remote access.
• Assess IoT/embedded device security including firmware and configurations.
• Secure MQTT, TLS, device authentication, and message queues.
• Write and maintain firewall rules, IDS/IPS, and log-analysis queries.
• Automate security tasks with scripts and IaC tools.
• Support hybrid security: IAM, security groups, firewalls, logging.
• Develop policies, standards, and best practices; support audits.

Skills

Linux / Unix administration

Network security

Vulnerability management

Threat modeling

Incident response

CI/CD security (GitHub Actions / GitL

Cloud security (AWS / GCP / Azure)

IoT / embedded device security

Scripting (Python / Bash)

RBAC / IAM security

Education

Bachelor’s degree in Computer Science / Cybersecurity

Tools

Terraform

Ansible

CloudFormation

Docker

Kubernetes

SIEM

SAST/DAST tools

GitHub Actions / GitLab CI

NIDS / firewall rules

Job description

Experience Level : 5 years

Employment Type : Full-time

About the Company

We’re a growing technology company focused on building reliable and scalable solutions that help businesses improve their operations. Our products connect software, hardware, and real-world workflows to create value across industries. We believe in teamwork, accountability, and a product mindset that blends creativity with strong technical execution.

About the Role

We are looking for a hands-on Security Analyst Engineer to protect our network, cloud, and connected-device ecosystem. You will assess, monitor, and harden infrastructure and IoT/embedded devices (cameras, sensors, gateways, edge devices), and work closely with infrastructure, development, and product teams to build security into what we ship and operate.

Key Responsibilities

• Design, implement, and maintain security measures across system infrastructure, cloud environments, and embedded systems.
• Monitor, triage, and respond to security events across networks, servers, cloud, and IoT/edge environments.
• Run vulnerability assessments and penetration tests (internal, network, and devicelevel) and track remediation to closure.
• Review and harden network architecture: firewalls, segmentation/VLANs, VPNs, load balancers, WAF, and secure remote access.
• Assess IoT and embedded device security, including firmware and configuration review, default credentials, exposed services, and insecure protocols.
• Secure IoT communication layers such as MQTT brokers, device authentication, TLS/certificate management, and message-queue access.
• Write and maintain firewall rules, IPTables policies, IDS/IPS rules, and log-analysis queries to detect and block attacks (e.g., brute force, scanning, abnormal device behavior).
• Support hybrid (cloud + on-premises) security: IAM, security groups, firewalls, and log collection and analysis.
• Automate security tasks and configuration using scripts and tools such as Ansible, Bash, or Python.
• Deploy, configure, and maintain Security Information and Event Management (SIEM) solutions to continuously monitor, detect, and respond to security events.
• Establish and maintain security monitoring, incident response, and vulnerability management processes across IT infrastructure and embedded environments.
• Develop, implement, and enforce cybersecurity policies, standards, and security best practices across the organization.
• Support internal and external cybersecurity audits and ensure compliance with customer security requirements and international security standards.
• Collaborate with engineering teams to integrate security-by-design principles into product development.
• Produce clear incident reports, risk assessments, and security documentation for technical and non-technical stakeholders.
• Ensure compliance with relevant cybersecurity standards and regulations.
• Support secure system architecture design for both software and embedded solutions.

Requirements

1. Education and Experience
   • Experience: Usually requires 5+ years of experience in software development, system and network administration, IT operations, and or cybersecurity.
   • Education: A bachelor’s degree in Computer Science, Cybersecurity, or a related technical field is commonly preferred, though practical project experience and selftaught portfolios often weigh more heavily.
2. Technical Skills & Tech Stack
   • Operating Systems & Networking: Strong grasp of Linux/Unix administration, TCP/IP, DNS, firewalls, and network security concepts.
   • CI/CD Pipelines: Experience building and securing pipelines using tools like GitHub Actions, GitLab CI, Bitbucket CI, Jenkins, or TeamCity.
   • Containers & Orchestration: Knowledge of Docker for containerization and Kubernetes (K8s) for cluster security and Role-Based Access Control (RBAC).
   • Infrastructure as Code (IaC): Experience with Terraform, Ansible, or CloudFormation, alongside IaC security scanning tools.
   • Cloud Platforms: Knowledges and or experience with major cloud providers like AWS, Google Cloud (GCP), or Microsoft Azure and Privilege IAM policies.
   • Nice to have : Understanding in at least one or more languages such as Python, Bash, or Shell scripting for automation
   • Application Security Testing: Integrating SAST (Static Application Security Testing) and DAST (Dynamic Application Security Testing), plus Software Composition Analysis (SCA).
   • Vulnerability & Secret Scanning : Using tools like Blackduck, Snyk, SonarQube, TruffleHog, GitLeaks or similar to catch exposed secrets and package flaws early.
   • Frameworks & Threat Modeling: Familiarity with the OWASP Top 10, threat modeling methodologies, and compliance standards (such as GDPR, HIPAA, or PCI-DSS).
   • Cross-functional bridge: Ability to translate complex security risks into actionable engineering priorities for developers.
   • Problem-solving: Strong troubleshooting skills for live production environments and incident response.
3. Nice to have qualification
   • Familiarity with international cybersecurity standards such as EU-RED (Radio Equipment Directive), CRA (Cyber Resilience Act), or similar frameworks.
   • Experience working with embedded or IoT device security.
   • Knowledge of secure coding practices and DevSecOps concepts.
   • Experience leading or participating in ISO 27001 certification or surveillance audits.
   • Familiarity with SOC 2 Type I/Type II readiness or compliance projects.
   • Experience implementing security controls for embedded systems, IoT devices, and cloud infrastructure.
   • Security certifications such as CompTIA Security+, CEH, CISSP, ISO 27001 Lead Implementer/Auditor, or equivalent are a plus.

What We Offer

• Opportunity to work on complex and impactful system platforms.
• Collaborative environment with a supportive and experienced cross-functional team.
• Be part of an environment that values innovation, ownership, and continuous improvement.
• Supportive team environment with Flat hierarchy.