IT Security Consultant - Professional Service

Packet Systems Indonesia; Jakarta Pusat; On-site; IDR 279,000,000 - 446,400,000; Full time

Job summary

Packet Systems Indonesia is seeking a Security Architect to design security solutions across NGFW, Load Balancer/ADC, NAC, Email security, and SASE/ZTNA for enterprise and banking clients. You will produce HLD/LLD and BoM/BoQ tailored to each engagement.

You will support security assessments, translate networking fundamentals into secure network designs, and lead discussions with clients. You will build SIEM/XDR capability, develop API security, AI security, and application security, and

Qualifications

• Bachelor's Degree in Information Technology / System Information from a reputable university
• 3-5 years hands-on experience in enterprise security infrastructure design and delivery
• Solid networking fundamentals: TCP/IP, routing and switching, VLAN, VPN, NAT, and network segmentation
• Proven design capability in NGFW on any leading enterprise security platform
• Working knowledge of SIEM / XDR platforms (vendor)
• Proven knowledge in API Security, AI Security, and Application Security (OWASP Top 10)
• Proven design capability in two of: Load Balancer/ADC, NAC, Email/Messaging Security, SASE/ZTNA
• Able to produce HLD/LLD and BoM/BoQ and lead solution discussions with clients
• Good communication in Bahasa Indonesia and English.

Responsibilities

• Design security solutions across NGFW, load balancer/ADC, NAC, email/messaging security, and SASE/ZTNA for enterprise and banking clients; produce HLD/LLD and BoM/BoQ
• Support security assessment activities: requirement gathering, solution sizing, and technical proposals
• Translate networking fundamentals into secure and implementable network designs; support troubleshooting during implementation
• Build and deliver SIEM/SOC capability: correlation rule design, SOAR playbook development, and log ingestion onboarding
• Develop capability in API security, AI security, and application security per client demand
• Contribute to the AS Security team's internal knowledge base and mentoring

Skills

NGFW design

SIEM/XDR know-how

API Security

AI Security

OWASP Top 10

Networking basics

HLD/LLD docs

BoM/BoQ creation

Client discussions

Education

Bachelor's in IT

Tools

SIEM/XDR platforms

SOAR automation

WAF platforms

Job description

• Design security solutions across NGFW, Load Balancer / ADC, NAC, Email / Messaging Security, and SASE/ZTNA for enterprise and banking clients, and produce the technical design deliverables (HLD/LLD, BoM/BoQ) on the platform selected for each engagement
• Support security assessment activities: requirement gathering, solution sizing, and technical proposals
• Translate networking fundamentals (routing, switching, segmentation, VPN) into secure and implementable network designs, and support troubleshooting during implementation
• Build and deliver SIEM/SOC capability: correlation rule design, SOAR playbook development, and log source / data ingestion onboarding on the client's SIEM/XDR platform
• Develop capability in emerging security areas driven by client demand: API security (API call protection, gateway and access control), AI security (securing AI/LLM usage, data and model access), and application security (WAF, OWASP Top 10 mitigation)
• Contribute to the AS Security team's internal knowledge base and mentoring

Requirements

• Bachelor's Degree of Information Technology / System Information from a reputable university
• 3-5 years hands-on experience in enterprise security infrastructure design and delivery
• Solid networking fundamentals: TCP/IP, routing and switching, VLAN, VPN, NAT, and network segmentation as the basis for security design.
• Proven design capability in Next-Generation Firewall (NGFW), on any leading enterprise security platform
• Working knowledge of SIEM / XDR platforms (any leading vendor): correlation rule development, playbook (SOAR) automation, and log source / data ingestion onboarding
• Proven knowledge and experience for the following: API Security, AI Security, and Application Security (concerning WAS, OWASP Top 10, or secure SDLC)
• Proven design capability in at least two of the following: Load Balancer / Application Delivery Controller (ADC); Network Access Control (NAC); Email / Messaging Security; SASE / ZTNA.
• Able to produce technical design documents (HLD/LLD) and BoM/BoQ, and to lead solution discussions with clients
• Good communication skills in Bahasa Indonesia and English.