IT Security Engineer

Blue Bird Group; Jakarta Pusat; On-site; IDR 167,400,000 - 334,800,000; Full time

Job summary

Blue Bird Group is seeking an experienced IT security professional for its Jakarta head office. The role involves penetration testing, leading vulnerability management efforts, tuning SIEM/EDR rules, and proactive threat hunting across internal infrastructure, apps, and networks.

You will investigate incidents, collect forensic evidence, and provide rapid remediation guidance while helping strengthen server, database, and network configurations per standards.

Qualifications

• Minimum of 3 years in IT security, security engineering or SOC.
• Experience testing security on platforms (Android/iOS) and securing APIs/microservices/databases.
• Strong knowledge of the OWASP Top 10.
• Hands-on experience with SIEM, EDR and vulnerability management tools.
• Capable of internal penetration testing and vulnerability assessments manually and with tools like Burp Suite.

Responsibilities

• Conduct scheduled penetration testing on internal infrastructure, applications and networks.
• Manage routine vulnerability scanning and coordinate patching with Infra/DevOps.
• Manage and optimize SIEM/EDR rules to detect threats and reduce false positives.
• Proactively hunt for hidden threats using log-based and data traffic methods.
• Perform incident investigations, collect digital forensic evidence, and provide rapid resolution recommendations.
• Provide technical guidance to strengthen configuration of servers, databases, and network devices.
• Implement the company's cybersecurity policies and procedures.

Skills

IT Security

SOC Operations

Threat Hunting

Vulnerability Assessment

Incident Response

Tools

Burp Suite

SIEM

EDR

Job description

• Conduct scheduled penetration testing on internal infrastructure, applications, and networks to identify security vulnerabilities.
• Manage routine vulnerability scanning and coordinate patching or technical mitigation processes with the Infra/DevOps team.
• Manage and optimize SIEM/EDR rules to accurately detect threats and reduce false positives.
• Proactively hunt for hidden threats within the network using log-based and data traffic investigation methodologies.
• Perform technical investigations during incidents, collect digital forensic evidence, and provide rapid resolution recommendations.
• Provide technical guidance to strengthen the configuration of servers, databases, and network devices in accordance with security standards.
• Implement the company's cybersecurity policies and procedures.

Qualification

• sMinimum of 3 years of experience in IT Security, Security Engineering, or Security Operations Center (SOC)
• Experience in security testing on Android and iOS platforms, as well as securing APIs, microservices, and databases
• Strong understanding of the OWASP Top 10
• In-depth technical experience in managing SIEM, EDR, and vulnerability management tools
• Capable of performing Internal Penetration Testing and Vulnerability Assessments both manually and using tools such as Burp Suite, etc
• Able to analyze data packets, system logs, and understand attack techniques based on the MITRE ATT&CK framework
• Relevant cybersecurity certifications will be an advantage
• Willing to work from our Head Office in Mampang