IT CYBERSECURITY

Confidential; Jakarta Timur; On-site; IDR 200,880,000 - 357,120,000; Full time

Job summary

Confidential in Jakarta is seeking an experienced Cyber Security professional to monitor and analyze security events across SIEM, Firewall, EDR/XDR, IDS/IPS, and other tools. You will perform security log analysis, incident investigation, containment, remediation, and recovery activities while supporting proactive threat hunting.

The role requires hands-on security hardening for servers, endpoints, networks, and cloud infrastructure, plus conducting VAPT on web apps, APIs, and Active Directory.

Qualifications

• Bachelor's Degree in Information Technology, Computer Science, Cyber Security, or related field.
• Minimum 3–5 years of experience in Cyber Security, SOC, Incident Response, Penetration Testing, or related roles.

Responsibilities

• Monitor and analyze security events from SIEM, Firewall, EDR/XDR, IDS/IPS, and other security tools.
• Perform security log analysis, incident investigation, containment, remediation, and recovery activities.
• Conduct proactive threat hunting and identify potential security threats across enterprise environments.
• Implement and maintain security hardening for servers, endpoints, networks, and cloud infrastructure.
• Perform Vulnerability Assessment & Penetration Testing (VAPT) on Web Applications, APIs, Servers, Networks, Wireless, and Active Directory environments.
• Identify security vulnerabilities and provide mitigation recommendations based on industry best practices.
• Prepare technical reports and executive summaries of security assessment results.
• Perform vulnerability validation and retesting after remediation.
• Collaborate with IT and Infrastructure teams to improve overall security posture.
• Develop security automation scripts to improve operational efficiency and incident response.

Skills

SOC operations

Incident response

Threat hunting

VAPT (Vulnerability Assessment & Pen</

Education

Bachelor's Degree in Information Technology, Computer Science, Cyber Security, or related field

Tools

Splunk

Google SecOps

Wazuh

Burp Suite

OWASP ZAP

Metasploit

Nessus

OpenVAS

Wireshark

Nikto

Python

Bash

PowerShell

Job description

• Monitor and analyze security events from SIEM, Firewall, EDR/XDR, IDS/IPS, and other security tools.
• Perform security log analysis, incident investigation, containment, remediation, and recovery activities.
• Conduct proactive threat hunting and identify potential security threats across enterprise environments.
• Implement and maintain security hardening for servers, endpoints, networks, and cloud infrastructure.
• Perform Vulnerability Assessment & Penetration Testing (VAPT) on Web Applications, APIs, Servers, Networks, Wireless, and Active Directory environments.
• Identify security vulnerabilities and provide mitigation recommendations based on industry best practices.
• Prepare technical reports and executive summaries of security assessment results.
• Perform vulnerability validation and retesting after remediation.
• Collaborate with IT and Infrastructure teams to improve overall security posture.
• Develop security automation scripts to improve operational efficiency and incident response.

Requirement

• Bachelor's Degree in Information Technology, Computer Science, Cyber Security, or related field
• Minimum 3–5 years of experience in Cyber Security, Security Operations Center (SOC), Incident Response, Penetration Testing, or related roles

Strong knowledge of :

• Security Operations (SOC) Incident Response & Threat Hunting Vulnerability Assessment & Penetration Testing (VAPT) SIEM, EDR/XDR, IDS/IP SOWASP Top 10MITRE ATTACK
• Framework CVE & CVSS Zero Trust Architecture Security Hardening Identity & Access Management (IAM)
• Technical skills : Networking (TCP/IP, Routing & Switching, VLAN, Firewall, VPN, DNS, Reverse Proxy, Load Balancer)Linux & Windows Server Administration Active Directory VMware / Virtualization Docker & Container Technology Kubernetes (preferred)Cloud Platforms (AWS, Azure, or GCP)
• Security tools: Splunk, Google SecOps, Wazuh Burp Suite OWASP, ZAPMetasploit Nessus / Open VASN, map Wireshark Nikto
• Programming & Automation: Python, BashPower Shell

Experience preferred:

• Experience implementing and operating SIEM platforms.
• Hands-on experience in SOC operations and security monitoring.
• Experience conducting penetration testing and vulnerability assessments.
• Experience handling security incidents and threat hunting activities.
• Familiar with cloud security and enterprise infrastructure.
• Excellent analytical thinking, troubleshooting, and problem-solving skills.
• Strong communication, documentation, and teamwork abilities.

Additional advantages:

• Experience participating in Bug Bounty programs.
• Active involvement in Capture The Flag (CTF) competitions.
• Participation in cybersecurity communities or research activities.