IT Security Operation

Honest; Indonesia; Remote; IDR 216,000,000 - 420,000,000; Full time

Benefits offered by this job

ESOP

Book subsidies

Top-tier healthcare

Job summary

Honest is seeking a Security Operations Specialist to lead our SOC, sustain the SIEM/SOAR stack, and actively hunt threats in a fintech environment. You will own incident response, vulnerability management, and security enhancements across cloud, network, and applications.

The role requires hands-on work with EDR, WAF, and automation, plus strong English communication to collaborate with multinational teams. Join a fast-growing company shaping finance in Asia.

Qualifications

• Security operations expertise across application, infrastructure, network, and cloud
• Hands-on with EDR, WAF, SOAR and related security solutions
• Scripting knowledge in Python, Go, or similar languages
• Security-first mindset and incident response experience
• Ability to work with English-speaking, multinational teams

Responsibilities

• Monitor SOC alerts and tune SIEM/SOAR rules and playbooks
• Automate alert responses to reduce fatigue and response time
• Lead incident management from detection to post-mortem
• Hunt for vulnerabilities in apps and infrastructure and close gaps

Skills

Threat hunting

Incident response

Security operations

SIEM/SOAR

EDR & WAF

Python/Go scripting

Security by default

Communication in English

Education

Bachelor's in Cybersecurity or related field

Tools

SIEM

SOAR

EDR

WAF

Job description

Who we are:

We are Honest, a company committed to building financial products that people truly love. Our products are designed to be fair, simple, and genuinely useful in everyday life. Our diverse team brings together people from different backgrounds who share the same goal: to create meaningful solutions that make finance better. After successfully launching our first product, we’re now in an exciting growth stage, learning fast, moving quickly, and building together as a team.

About the role:

We’re looking for a Security Operations Specialist who lives for the hunt. You won’t just be staring at a dashboard; you’ll be the operator of our defense. In a fintech environment, the stakes are high and the threats are evolving. You’ll be the go‑to person maintaining the systems that keep our customers’ data safe and our environment resilient against anything the internet throws at us. If you’re passionate about threat detection, incident response, vulnerability management, and staying ahead of evolving cyber risks, we’d love to connect with you.

How you will make an impact:

1. Monitor and respond
   • Be our first responder, managing our SOC team and SIEM/SOAR stack and turning “alerts” into “actions” by developing and fine-tuning relevant rules and playbooks
   • Automate alert responses to minimize alert fatigue and response time via security workflow automations
2. Resolve incidents and close gaps
   • Lead security incident management — from initial detection to post-mortem analysis to prevent re‑occurrence
   • Hunt for weaknesses in our applications and infrastructure, and close the gaps before the bad guys do
3. Own the security stack and standards
   • Own our security solutions stack — EDR, WAF, SOAR and others — and be the subject‑matter expert and internal champion for them
   • Ensure organizational protocols adhere to industry best practices and regulatory frameworks
   • Stay up to date with the latest cybersecurity trends, threats, and technologies to improve and contribute to our security program

What you need to have:

• Problem‑solving skills to help with problem resolutions
• Technical expertise in IT security operations covering broad angles ranging from application, infrastructure, network, and cloud
• Toolbox mastery: hands‑on experience with EDR, WAF, SOAR, and other security solutions
• Scripting skills: you look at security vulnerabilities and know what to do to fix them. This requires the knowledge and logic of some well‑known languages, such as Python, Go, etc.
• Security by default: a “security‑first” mindset that incorporates security in everything you do
• Resilience: things don’t always go smoothly. In case things fail, you know how to recover quickly and learn your lessons
• Effective communication and interpersonal skills in English to collaborate with diverse multi‑national teams

What makes you stand out:

• Security certification such as OSCP, GCIA, GCIH, CISSP, or CEH
• Experience in a financial institution regulated by OJK and Bank Indonesia
• Familiarity with ISO/IEC 27001:2022 controls and supporting surveillance or certification audits
• Experience with cloud‑native security tooling (GCP, AWS) and infrastructure‑as‑code
• Threat hunting, detection engineering, or purple‑team experience
• Exposure to regulatory or external audit requests on IT security controls

Our application process:

Hiring is something we do with care. Because of that, having a transparent and thorough recruitment process is key. If you liked what you’ve read and are up for the challenge, here is what to expect after submitting your resume:

• The hiring team reviews your application
• You get invited to an initial call with the hiring team
• Onsite interviews with relevant team members
• Offer

Why you’ll love it here:

• We’re all owners; everyone at Honest gets ESOP (Employee Stock Option Plan)
• Training course and book subsidies
• You’ll be working with the smartest people in the industry
• Top‑of‑the‑line medical healthcare plan

Honest hiring:

At Honest, we’re working hard to build the future of finance for Asia. To do so, we prioritize attracting the best talent worldwide to join us – regardless of their background and heritage. At Honest, we are committed to equal employment opportunities regardless of race, color, ethnicity, ancestry, religion, national origin, gender, sex, gender identity or expression, sexual orientation, age, citizenship, marital or parental status, disability, or other class protected by applicable law. We are proud to be an equal opportunity workplace. If you want to be part of changing how people access finance in Asia, join us and help us build a global company where we’re all proud to belong.