IT Security Engineer: Threat Hunting & Incident Response

Blue Bird Group; Jakarta Pusat; On-site; IDR 167,400,000 - 334,800,000; Full time

Job summary

Blue Bird Group is seeking an experienced IT security professional for its Jakarta head office. The role involves penetration testing, leading vulnerability management efforts, tuning SIEM/EDR rules, and proactive threat hunting across internal infrastructure, apps, and networks.

You will investigate incidents, collect forensic evidence, and provide rapid remediation guidance while helping strengthen server, database, and network configurations per standards.

Qualifications

• Minimum of 3 years in IT security, security engineering or SOC.
• Experience testing security on platforms (Android/iOS) and securing APIs/microservices/databases.
• Strong knowledge of the OWASP Top 10.
• Hands-on experience with SIEM, EDR and vulnerability management tools.
• Capable of internal penetration testing and vulnerability assessments manually and with tools like Burp Suite.

Responsibilities

• Conduct scheduled penetration testing on internal infrastructure, applications and networks.
• Manage routine vulnerability scanning and coordinate patching with Infra/DevOps.
• Manage and optimize SIEM/EDR rules to detect threats and reduce false positives.
• Proactively hunt for hidden threats using log-based and data traffic methods.
• Perform incident investigations, collect digital forensic evidence, and provide rapid resolution recommendations.
• Provide technical guidance to strengthen configuration of servers, databases, and network devices.
• Implement the company's cybersecurity policies and procedures.

Skills

IT Security

SOC Operations

Threat Hunting

Vulnerability Assessment

Incident Response

Tools

Burp Suite

SIEM

EDR

Job description

Blue Bird Group is seeking an experienced IT security professional for its Jakarta head office. The role involves penetration testing, leading vulnerability management efforts, tuning SIEM/EDR rules, and proactive threat hunting across internal infrastructure, apps, and networks.

You will investigate incidents, collect forensic evidence, and provide rapid remediation guidance while helping strengthen server, database, and network configurations per standards.