IT Security

MAG; Jakarta Pusat; On-site; IDR 167,400,000 - 312,480,000; Full time

Job summary

MAG Insurance is seeking a seasoned Cyber Security professional to analyze SOC reports, logs from firewalls, and security devices. The role will optimize NGFW/WAF configurations, implement DLP, and conduct incident response simulations, phishing awareness, and internal pentesting.

Requires CEH/Security+ and 3+ years in security, with strong English skills. Candidate will work on safeguarding endpoints/servers and supporting regulator/compliance requirements, using tools like Wazuh, ArcSight,

Qualifications

• 1. S1 (IT Major Preferred).
• 2. Experienced in Cyber Security (VAPT, Threat Hunting, Incident Handler, Secure Code).
• 3. CEH, Security+ Certification.
• 4. Minimum experience 3 years.
• 5. Good English language skills spoken/written; Red/Blue team experience.
• 6. Proficiency with SIEM, VAPT, SAST/DAST, DLP, patching, NAC, EDR, and WAF tools.

Responsibilities

• Analyse reports from Managed SOC and security devices.
• Analyse logs from Firewalls and other Security devices.
• Optimize configuration of NGFW, WAF, Anti Spam, Anti Virus/EDR/XDR.
• Implement DLP Tool as regulator/CIS requires.
• Perform Incident Response Simulation & Testing.
• Perform Phishing Simulation & User Security Awareness.
• Conduct internal pentest or assist external pentest.
• Perform baseline checks on endpoints and servers.

Skills

Cyber Security

VAPT

Threat Hunting

Incident Handling

Red Team / Blue Team

English proficiency

Python/PowerShell

Education

Bachelor's degree in IT (S1)

Tools

SIEM (Wazuh/ArcSight)

VAPT tools (Tenable/Rapid7)

SAST/DAST (Burp Suite, SonarQube)

DLP tools (Forcepoint/Purview)

Patching tools (ManageEngine/Kaseya)

NAC tools (EasyNAC)

EDR/NGFW/WAF (CrowdStrike, Palo Alto)

WAF (Cloudflare/Imperva)

Wireshark/Kali Linux

Identity/Asset Inventory tools (CyberArk/Lansweeper)

Job description

• Analyse reports from Managed SOC,Asset Inventory,NAC,Patch Management,IAM,VAPT,EDR Tools.
• Analyse logs from Managed SOC, Firewalls and other Security devices.
• Optimise configuration of NGFW, WAF, Anti Spam, Anti Virus/EDR/XDR and other Security Tools.
• Implement DLP Tool as required by regulator or CIS.
• Perform Incident Response Simulation & Testing.
• Perform Phishing Simulation & User Security Awareness.
• Perform internal pentest or assist external pentest.
• Perform baseline check on all endpoints and servers.

Job Requirements

A. Qualification:

1. S1 (IT Major Preferred).

2. Experienced in Cyber Security (VAPT, Threat Hunting, Incident Handler, Secure Code).

3. CEH, Security+ Certification.

4. Minimum experience 3 years.

5. Soft Skills:

· Good English language skills spoken/written.

· Experienced in Cyber Security as Red Team/Blue Team.

6. Technical Skill:

· Mastering the use of SIEM Tools such as Wazuh, ArcSight or equivalent.

· Mastering the use of VAPT Tools such as Tenable, Rapid7 or equivalent.

· Mastering the use of SAST/DAST Tools such as Burp Suite, SonarQube or equivalent.

· Mastering the use of DLP Tools such as Forcepoint, Purview or equivalent.

· Mastering the use of Patching Tools such as ManageEngine, Kaseya or equivalent.

· Mastering the use of NAC Tools such as EasyNAC or equivalent.

· Mastering the use of EDR Tools such as Crowdstrike, PaloAlto Cortex or equivalent.

· Mastering the use of WAF Tools such as Cloudflare, Imperva or equivalent.

· Mastering the use of Utility Tools such as Wireshark, Kali Linux.

· Experienced the use of Identity Access Management Tools such as Cyberark, ManageEngine or equivalent.

· Experienced the use of Asset Inventory Tools such as Lansweeper, Kaseya or equivalent.

· Proficiency in Python/Power Shell programming is a plus.

About MAG Insurance

Established on 14th November 1980, the company has established its presence in the Indonesian insurance market and has grown into one of the largest insurance companies in the country. With a 45 year history of business operations the company never stops to innovate to answer the customer’s needs for protection. We provide a range of products and solutions with value added services. The company