Information Technology Security Engineer

Lancesoft; Sumatera Selatan; On-site; IDR 240,000,000 - 420,000,000; Full time

Job summary

LanceSoft in Indonesia seeks a seasoned IT security specialist to monitor and analyze security alerts, manage incidents, and coordinate SOC activities. You will implement security policies, assess vulnerabilities, and conduct audits across enterprise infrastructure to ensure zero-trust and least-privilege adherence.

The role requires hands-on NGFW/EDR/NAC/PAM experience, strong networking knowledge, and ITIL familiarity. A degree in a related field and 4+ years in security IT are expected.

Qualifications

• Bachelor’s degree in Informatics/Information Systems/CS/Cybersecurity or related field.
• Minimum 4 years in IT Infrastructure or IT Security, with 2+ years on enterprise-scale infra.
• Hands-on NGFW, EDR/XDR, NAC, and PAM experience required.
• Strong knowledge of TCP/IP, VLAN, VPN, RADIUS/802.1X, IAM, MFA.
• Experience with vulnerability assessment, patching, and log analysis.
• Familiarity with ITIL Incident, Problem and Change management.
• Basic scripting in Python/PowerShell/Shell is a plus.

Responsibilities

• Monitor and analyze security alerts, events, and threats across IT security.
• Handle security incidents including containment, remediation, and recovery per SLA/SOP.
• Coordinate daily security operations with the SOC team.
• Configure, maintain, and optimize security policies, access controls, and infra.
• Monitor endpoints, networks, and privileged access for security compliance.
• Conduct vulnerability assessments and security hardening activities.
• Perform audits of user access rights and privileged accounts per Least Privilege/Zero Trust.
• Manage security changes including impact assessments and rollbacks.
• Lead RCA for major incidents and propose corrective/preventive actions.
• Collaborate with Network, System, Service Desk, SOC, IT teams, and external vendors.
• Prepare periodic reports on incidents, vulnerabilities, compliance and improvements.

Skills

NGFW

EDR/XDR

NAC

PAM

IAM

MFA

Patch management

Vulnerability analysis

ITIL processes

Python scripting

Education

Bachelor's degree in IT / CS / cybersecurity

Tools

Fortinet

Palo Alto

Cisco

CrowdStrike

Microsoft Security

Job description

Key Responsibilities

• Monitor and analyze security alerts, events, and potential threats across IT security infrastructure.
• Handle security incidents, including threat containment, remediation, and recovery in accordance with SLA and SOP.
• Coordinate daily security operations with the Security Operations Center (SOC) team.
• Configure, maintain, and optimize security policies, access controls, and security infrastructure.
• Monitor endpoint devices, network infrastructure, and privileged access to ensure compliance with security standards.
• Conduct vulnerability assessments, security hardening, patch management, and security configuration reviews.
• Perform regular audits of user access rights and privileged accounts based on Least Privilege and Zero Trust principles.
• Manage security changes, including impact assessments, approvals, implementation, validation, and rollback planning.
• Lead root cause analysis (RCA) for major security incidents and recommend corrective and preventive actions.
• Collaborate with Network, System, Service Desk, SOC, Internal IT teams, and external vendors to improve security operations.
• Prepare periodic reports on security incidents, vulnerabilities, compliance, and improvement recommendations.

Requirements

• Bachelor's degree (S1) in Informatics Engineering, Information Systems, Computer Science, Cybersecurity, or a related field.
• Minimum 4 years of experience in IT Infrastructure or IT Security, including at least 2 years managing enterprise-scale IT security infrastructure.
• Hands-on experience with Next-Generation Firewalls (NGFW), Endpoint Detection and Response (EDR/XDR), Network Access Control (NAC), and Privileged Access Management (PAM).
• Strong understanding of TCP/IP, VLAN, routing, VPN, RADIUS/802.1X, endpoint hardening, IAM, and MFA.
• Experience in vulnerability assessment, security hardening, patch management, and security log analysis.
• Familiarity with ITIL Incident, Problem, and Change Management processes.
• Basic scripting skills in Python, PowerShell, or Shell Scripting are an advantage.
• Must hold at least one active relevant certification, such as CompTIA Security+, CompTIA CySA+, Fortinet, Palo Alto Networks, Cisco CyberOps, CrowdStrike, or Microsoft Security certifications.
• Strong analytical, problem-solving, communication, documentation, and cross-functional coordination skills. restore omitted governance responsibilitiesmake the job ad more candidate-friendly