DevSecOps (Network & IoT/Embedded Security)

Maestronic; Denpasar; On-site; IDR 180,000,000 - 300,000,000; Full time

Benefits offered by this job

Impactful projects

Cross-functional team

Ownership & growth

Flat hierarchy

Job summary

Maestronic is seeking a hands-on Security Analyst Engineer in Bali to protect our network, cloud, and embedded ecosystem. You will assess, monitor, and harden infrastructure and IoT devices, collaborating with infrastructure, development, and product teams to bake security into what we ship and operate.

The role covers incident detection, vulnerability management, secure architecture, and automation using scripts (Python/Bash). Experience with CI/CD pipelines, containers, and IaC is essential.

Qualifications

• 5+ years of software development, system & network administration, IT operations or cybersecurity.
• Bachelor’s degree in Computer Science or Cybersecurity is preferred.
• Experience with securing Linux/Unix environments and cloud platforms.

Responsibilities

• Design and maintain security across infrastructure, cloud and embedded systems.
• Monitor, triage, and respond to security events across networks, servers, cloud and IoT.
• Conduct vulnerability assessments and tests; track remediation to closure.

Skills

Security engineering

Network security

Cloud security

IoT security

Vulnerability assessment

Incident response

Scripting (Python/Bash)

IAM & RBAC

Education

Bachelor's degree in CS/Cybersecurity

Tools

GitHub Actions

GitLab CI

Jenkins

Docker

Kubernetes

Terraform

Ansible

CloudFormation

Job description

Location : Open in Indonesia (Bali/Bandung Based)

Experience Level : 5 years

Employment Type : Full-time

About the Company

We’re a growing technology company focused on building reliable and scalable solutions that help businesses improve their operations. Our products connect software, hardware, and real-world workflows to create value across industries. We believe in teamwork, accountability, and a product mindset that blends creativity with strong technical execution.

About the Role

We are looking for a hands-on Security Analyst Engineer to protect our network, cloud, and connected-device ecosystem. You will assess, monitor, and harden infrastructure and IoT/embedded devices (cameras, sensors, gateways, edge devices), and work closely with infrastructure, development, and product teams to build security into what we ship and operate.

Key Responsibilities

• Design, implement, and maintain security measures across system infrastructure, cloud environments, and embedded systems.
• Monitor, triage, and respond to security events across networks, servers, cloud, and IoT/edge environments.
• Run vulnerability assessments and penetration tests (internal, network, and devicelevel) and track remediation to closure.
• Review and harden network architecture: firewalls, segmentation/VLANs, VPNs, load balancers, WAF, and secure remote access.
• Assess IoT and embedded device security, including firmware and configuration review, default credentials, exposed services, and insecure protocols.
• Secure IoT communication layers such as MQTT brokers, device authentication, TLS/certificate management, and message-queue access.
• Write and maintain firewall rules, IPTables policies, IDS/IPS rules, and log-analysis queries to detect and block attacks (e.g., brute force, scanning, abnormal device behavior).
• Support hybrid (cloud + on-premises) security: IAM, security groups, firewalls, and log collection and analysis.
• Automate security tasks and configuration using scripts and tools such as Ansible, Bash, or Python.
• Deploy, configure, and maintain Security Information and Event Management (SIEM) solutions to continuously monitor, detect, and respond to security events.
• Establish and maintain security monitoring, incident response, and vulnerability management processes across IT infrastructure and embedded environments.
• Develop, implement, and enforce cybersecurity policies, standards, and security best practices across the organization.
• Support internal and external cybersecurity audits and ensure compliance with customer security requirements and international security standards.
• Collaborate with engineering teams to integrate security-by-design principles into product development.
• Produce clear incident reports, risk assessments, and security documentation for technical and non-technical stakeholders.
• Ensure compliance with relevant cybersecurity standards and regulations.
• Support secure system architecture design for both software and embedded solutions.

Requirements

Education and Experience

• Experience: Usually requires 5+ years of experience in software development, system and network administration, IT operations, and or cybersecurity.
• Education: A bachelor’s degree in Computer Science, Cybersecurity, or a related technical field is commonly preferred, though practical project experience and selftaught portfolios often weigh more heavily.

Technical Skills & Tech Stack

• Operating Systems & Networking: Strong grasp of Linux/Unix administration, TCP/IP, DNS, firewalls, and network security concepts.
• CI/CD Pipelines: Experience building and securing pipelines using tools like GitHub Actions, GitLab CI, Bitbucket CI, Jenkins, or TeamCity.
• Containers & Orchestration: Knowledge of Docker for containerization and Kubernetes (K8s) for cluster security and Role-Based Access Control (RBAC).
• Infrastructure as Code (IaC): Experience with Terraform, Ansible, or CloudFormation, alongside IaC security scanning tools.
• Cloud Platforms: Knowledges and or experience with major cloud providers like AWS, Google Cloud (GCP), or Microsoft Azure and Privilege IAM policies.
• Nice to have : Understanding in at least one or more languages such as Python, Bash, or Shell scripting for automation

Security-Specific Competencies

• Application Security Testing: Integrating SAST (Static Application Security Testing) and DAST (Dynamic Application Security Testing), plus Software Composition Analysis (SCA).
• Vulnerability & Secret Scanning: Using tools like Blackduck, Snyk, SonarQube, TruffleHog, GitLeaks or similar to catch exposed secrets and package flaws early.
• Frameworks & Threat Modeling: Familiarity with the OWASP Top 10, threat modeling methodologies, and compliance standards (such as GDPR, HIPAA, or PCI-DSS).

Soft Skills & Collaboration

• Cross-functional bridge: Ability to translate complex security risks into actionable engineering priorities for developers.
• Problem-solving: Strong troubleshooting skills for live production environments and incident response.

Nice to have qualification

• Familiarity with international cybersecurity standards such as EU-RED (Radio Equipment Directive), CRA (Cyber Resilience Act), or similar frameworks.
• Experience working with embedded or IoT device security.
• Knowledge of secure coding practices and DevSecOps concepts.
• Experience leading or participating in ISO 27001 certification or surveillance audits.
• Familiarity with SOC 2 Type I/Type II readiness or compliance projects.
• Experience implementing security controls for embedded systems, IoT devices, and cloud infrastructure.
• Security certifications such as CompTIA Security+, CEH, CISSP, ISO 27001 Lead Implementer/Auditor, or equivalent are a plus.

What We Offer

• Opportunity to work on complex and impactful system platforms.
• Collaborative environment with a supportive and experienced cross-functional team.
• Be part of an environment that values innovation, ownership, and continuous improvement.
• Supportive team environment with Flat hierarchy.