IT Security Engineer

PT. Pintar Inovasi Digital; Jakarta Utara; On-site; IDR 200.000.000 - 300.000.000; Full time

Job summary

A technology company in Jakarta Utara is seeking an IT Security Engineer who will develop and implement security policies, monitor and manage security across both on-premise and cloud infrastructures, and perform risk assessments. Candidates should hold a degree in Computer Science or related fields with 1 to 3 years of relevant experience in IT Security. Key skills include problem-solving, teamwork, and experience with security tools. A proactive mindset and clear communication skills are essential. This role offers a chance to enhance information security practices within the organization.

Qualifications

• 1 to 3 years of experience in IT Security (red or blue team), Cybersecurity or related fields.
• Proficient in network and cloud security concepts.
• Hands-on experience with security tools and techniques.

Responsibilities

• Develop and implement security policies and SOPs.
• Monitor security for on-premise and cloud infrastructures.
• Conduct risk assessments and coordinate with IT teams.

Skills

Analytical skills

Problem-solving skills

Teamwork abilities

Strong communication

Education

Diploma or Bachelor’s in Computer Science or related field

Tools

SIEM

Nmap

Wireshark

Metasploit

Kali Linux

Job description

AsetKu is a P2P lending platform developed by PT. Pintar Inovasi Digital.

Responsibilities

• Develop, enhance, and implement information security policies and SOPs aligned with regulatory requirements and the risk committee.
• Monitor security across on-premise and cloud infrastructure (servers, databases, networks, WAF, firewalls, VPN, API security, endpoints, IAM).
• Perform security risk assessments and design mitigation plans in collaboration with relevant IT teams.
• Handle incident response together with the CSIRT, including investigation, analysis, root cause identification, containment, eradication, recovery, and incident reporting.
• Conduct regular internal vulnerability assessments and penetration testing and coordinate remediation with relevant IT teams.
• Manage access control and privilege management for all systems and applications, including periodic user access reviews.
• Ensure compliance with security standards and external audits (ISO 27001, POJK, NIST, SOC2, internal audit).
• Support the development of the Business Continuity Plan (BCP) and Disaster Recovery Plan (DRP).
• Develop and conduct security awareness training for all employees (phishing simulations, policy awareness sessions).

Requirements

• A diploma or Bachelor’s degree in Computer Science, Information Technology, or a related field.
• Between 1 to 3 years of relevant experience in IT Security (red or blue team), Cybersecurity, Penetration Testing, Network Security, and Information Security.
• Strong analytical and problem‑solving skills, with a passion for technology and security.
• Excellent communication and teamwork abilities.
• Good understanding of network security, cloud security (AliCloud, GCP, AWS), and server management.
• Able to develop a clear understanding and proper documentation.
• Hands‑on experience with security tools and technologies such as SIEM, Nmap, Wireshark, Metasploit, Kali Linux and Linux & Network Administration is a plus.
• A proactive mindset and the ability to work independently while contributing to a team effort.

How many years of experience do you have as an Information Technology Security Engineer?