IIPS Cybersecurity Expert

APP Group; Serpong; On-site; IDR 390,600,000 - 613,800,000; Full time

Job summary

APP Group is seeking an experienced cybersecurity professional to develop policies, audit logs, and lead incident response across a global finance environment. The role emphasizes hands-on threat hunting with SIEM (Splunk) and conducting red-team/blue-team drills.

Required five years of relevant work experience, a CS/Info Security degree, and proficiency in scripting (Python, PowerShell). On-site in Serpong, Tangerang; English communication is essential, Mandarin a plus.

Qualifications

• Bachelor’s degree in Computer Science, Information Security, or related fields with at least 5 years of experience.
• Familiarity with web attacks, lateral movement, and ransomware mechanisms; proven incident response experience.
• Ability to apply AI technologies in cybersecurity and use ML/DL models to assist in detection and investigation.
• Proficient in at least one scripting language (Python, Ruby, PowerShell) for automation.
• Security certifications such as CISSP or Security+ are preferred.
• Strong English communication; Mandarin a plus; ability to collaborate across IT ops, development, and business units.
• Willing to work on-site in Serpong, Tangerang.

Responsibilities

• Develop cybersecurity policies and review configurations of related cybersecurity products.
• Conduct log auditing and threat hunting using SIEM (Splunk) to identify potential threats.
• Lead security incident response and root cause analysis for virus outbreaks, hacks, and ransomware incidents.
• Organize red-team/blue-team exercises to improve incident response capabilities.

Skills

Cybersecurity

Threat intelligence

Incident response

Log analysis

Python scripting

English communication

Education

Bachelor’s degree in Computer Science or Information Security

Tools

SIEM

Splunk

NTA

Honeypot

AWVS

Threat intelligence platforms

Job description

At APP Group, our innovation drives opportunity, making us your gateway to a career that champions inclusivity, growth and sustainable future.

Why Join Us?

• Work with international teams and gain valuable experience in a diverse and dynamic global finance environment.
• Be part of a leading company in the paper production industry, known for its commitment to sustainability and innovation.
• Engage in complex financial analysis and reporting that supports strategic decision-making and drives business success.

What you will experience:

• Develop cybersecurity policies and review the configuration and alerts of related cybersecurity products, including but not limited to NTA, HoneyPot, AWVS, and Threat Intelligence.
• Conduct log auditing and threat hunting using SIEM, leveraging Splunk’s search and analysis capabilities to identify potential Advanced Persistent Threats (APTs).
• Lead security incident response and root cause analysis, including handling virus outbreaks, hacker attacks, and ransomware incidents.
• Organize and participate in red-team/blue-team exercises or attack-defense drills to enhance the team’s practical incident response capabilities.

What is required:

• Bachelor’s degree or higher with Computer Science, Information Security, or related fields; at least 5 years of relevant work experience.
• Familiarity with common web attacks, lateral movement, and ransomware mechanisms; proven experience in practical incident response.
• Ability to implement AI technologies in cybersecurity; capable of using machine learning/deep learning models to assist in the automated detection, analysis, and investigation of security incidents.
• Proficiency in at least one scripting language (e.g., Python, Ruby, PowerShell) and the ability to write scripts to improve the efficiency of daily operations and incident response.
• Certifications: Candidates holding security certifications such as CISP, CISSP, or Security+ are preferred.
• Strong communication skills in English (Mandarin is a plus) and a collaborative spirit, with the ability to work efficiently with IT operations, development, and business departments to jointly advance security improvements
• Willing to work in an on-site setting in Serpong, Tangerang