IT Security Engineer

PT Kode Evolusi Bangsa; Cirebon; Hybrid; IDR 180,000,000 - 320,000,000; Full time

Job summary

PT Kode Evolusi Bangsa is seeking a security professional to conduct penetration testing across applications, infrastructure, and IT systems. You will assess servers, networks, and configurations, and document vulnerabilities with severity and business impact.

The role requires hands-on testing, familiarity with OWASP Top 10, and experience in testing web apps and APIs. You will collaborate with IT and development teams to implement fixes and perform retesting in a hybrid setup with 3 days

Qualifications

• Minimum 3 years of experience in IT Security, Information Security, or a related field.
• Hands-on experience in penetration testing and vulnerability assessment.
• Good understanding of infrastructure security, including network, server, and system security.
• Experience assessing web applications, APIs, and other user-facing applications.
• Familiarity with common security vulnerabilities, such as OWASP Top 10.
• Proficiency in using security testing tools such as Burp Suite, OWASP ZAP, Nmap, or similar tools.
• Understanding of security assessment methodologies, risk analysis, and vulnerability remediation.
• Strong analytical, problem-solving, and technical reporting skills.

Responsibilities

• Conduct penetration testing to identify security vulnerabilities in applications, infrastructure, and IT systems.
• Assess infrastructure security, including servers, networks, and configurations.
• Perform application security assessments to identify vulnerabilities and risks.
• Identify, analyze, and document findings with severity and business impact.
• Provide remediation guidance and collaborate with IT and development teams.
• Conduct security verification and retesting to ensure vulnerabilities are resolved.
• Prepare security assessment reports and maintain technical documentation.

Skills

Pentesting

Vulnerability assessment

Infrastructure security

Web apps & APIs

OWASP Top 10

Security reporting

Tools

Burp Suite

OWASP ZAP

Nmap

Job description

Conduct penetration testing (pentesting) to identify security vulnerabilities in applications, infrastructure, and IT systems.

Assess infrastructure security, including servers, networks, and system configurations.

Perform application security assessments to identify vulnerabilities and potential risks.

Identify, analyze, and document security findings, including their severity and potential business impact.

Provide recommendations and remediation guidance to address identified vulnerabilities.

Collaborate with IT and development teams to implement security improvements.

Conduct security verification and retesting to ensure vulnerabilities have been properly resolved.

Prepare security assessment reports and maintain relevant technical documentation.

JOB REQUIREMENTS

Minimum 3 years of experience in IT Security, Information Security, or a related field.

Hands-on experience in penetration testing and vulnerability assessment.

Good understanding of infrastructure security, including network, server, and system security.

Experience assessing web applications, APIs, and other user-facing applications.

Familiarity with common security vulnerabilities, such as OWASP Top 10.

Proficiency in using security testing tools such as Burp Suite, OWASP ZAP, Nmap, or similar tools.

Understanding of security assessment methodologies, risk analysis, and vulnerability remediation.

Strong analytical, problem-solving, and technical reporting skills.

Willing to work hybrid, with 3 days onsite in Cirebon and 2 days remote per week.