IT Security Consultant - Professional Service

Packet Systems Indonesia; Indonesia; On-site; IDR 167,400,000 - 334,800,000; Full time

Job summary

Packet Systems Indonesia is seeking a security solutions architect to design security solutions across NGFW, load balancer/ADC, NAC, email security, and SASE/ZTNA for enterprise and banking clients. You will produce HLD/LLD and BoM/BoQ deliverables on the platform selected for each engagement.

You will support security assessments, translate networking fundamentals into secure designs, and assist with implementation troubleshooting.

Qualifications

• Bachelor's Degree in Information Technology / System Information from a reputable university.
• 3-5 years hands-on experience in enterprise security infrastructure design and delivery.
• Solid networking fundamentals: TCP/IP, routing and switching, VLAN, VPN, NAT, and network segmentation as the basis for security design.
• Proven design capability in Next-Generation Firewall (NGFW) on any leading enterprise security platform.
• Working knowledge of SIEM / XDR platforms (any leading vendor): correlation rule development, playbook (SOAR) automation, and log source / data ingestion onboarding.
• Proven knowledge and experience for API Security, AI Security, and Application Security (concerning WAS, OWASP Top 10, or secure SDLC).
• Proven design capability in at least two of the following: Load Balancer / ADC; NAC; Email / Messaging Security; SASE / ZTNA.
• Able to produce technical design documents (HLD/LLD) and BoM/BoQ, and to lead solution discussions with clients.
• Good communication skills in Bahasa Indonesia and English.

Responsibilities

• Design security solutions across NGFW, Load Balancer / ADC, NAC, Email / Messaging Security, and SASE/ZTNA for enterprise and banking clients, and produce the technical design deliverables (HLD/LLD, BoM/BoQ) on the platform selected for each engagement
• Support security assessment activities: requirement gathering, solution sizing, and technical proposals
• Translate networking fundamentals (routing, switching, segmentation, VPN) into secure and implementable network designs, and support troubleshooting during implementation
• Build and deliver SIEM/SOC capability: correlation rule design, SOAR playbook development, and log source / data ingestion onboarding on the client's SIEM/XDR platform
• Develop capability in emerging security areas driven by client demand: API security (API call protection, gateway and access control), AI security (securing AI/LLM usage, data and model access), and application security (WAF, OWASP Top 10 mitigation)
• Contribute to the AS Security team's internal knowledge base and mentoring

Skills

NGFW design

SIEM/XDR

SOAR playbooks

API security

AI security

Application security

Network design

Client discussions

Education

Bachelor's Degree in Information Technology / System Information

Job description

Job Description:

• Design security solutions across NGFW, Load Balancer / ADC, NAC, Email / Messaging Security, and SASE/ZTNA for enterprise and banking clients, and produce the technical design deliverables (HLD/LLD, BoM/BoQ) on the platform selected for each engagement
• Support security assessment activities: requirement gathering, solution sizing, and technical proposals
• Translate networking fundamentals (routing, switching, segmentation, VPN) into secure and implementable network designs, and support troubleshooting during implementation
• Build and deliver SIEM/SOC capability: correlation rule design, SOAR playbook development, and log source / data ingestion onboarding on the client's SIEM/XDR platform
• Develop capability in emerging security areas driven by client demand: API security (API call protection, gateway and access control), AI security (securing AI/LLM usage, data and model access), and application security (WAF, OWASP Top 10 mitigation)
• Contribute to the AS Security team's internal knowledge base and mentoring

Requirements:

• Bachelor's Degree of Information Technology / System Information from a reputable university
• 3-5 years hands-on experience in enterprise security infrastructure design and delivery
• Solid networking fundamentals: TCP/IP, routing and switching, VLAN, VPN, NAT, and network segmentation as the basis for security design.
• Proven design capability in Next-Generation Firewall (NGFW), on any leading enterprise security platform
• Working knowledge of SIEM / XDR platforms (any leading vendor): correlation rule development, playbook (SOAR) automation, and log source / data ingestion onboarding
• Proven knowledge and experience for the following: API Security, AI Security, and Application Security (concerning WAS, OWASP Top 10, or secure SDLC)
• Proven design capability in at least two of the following: Load Balancer / Application Delivery Controller (ADC); Network Access Control (NAC); Email / Messaging Security; SASE / ZTNA.
• Able to produce technical design documents (HLD/LLD) and BoM/BoQ, and to lead solution discussions with clients
• Good communication skills in Bahasa Indonesia and English.

Posting Code: #LI-IG1