IT Security Operation Specialist

Honest; Cikoko; On-site; IDR 167,400,000 - 301,320,000; Full time

Benefits offered by this job

ESOP

Training subsidies

Collaborative team of experts

Job summary

Honest in Indonesia is seeking a Security Operation Specialist to defend our fintech platform. You will monitor SIEM/SOAR, respond to alerts, coordinate incident response, and close gaps to protect customer data.

You will own security tooling (EDR, WAF, SOAR), hunt threats, improve controls, and collaborate with multinational teams to strengthen resilience against evolving cyber risks.

Qualifications

• Broad IT security operations expertise across application, infrastructure, network and cloud.
• Threat hunting, detection engineering and vulnerability management experience.
• Hands-on with EDR, WAF, SOAR and related security tooling.
• Scripting abilities in languages such as Python or Go to remediate vulnerabilities.

Responsibilities

• Monitor and respond to security alerts by tuning SIEM/SOAR rules and playbooks.
• Lead security incident management from detection through post-mortem analysis.
• Own and optimize security tooling stack (EDR, WAF, SOAR) and ensure compliance with best practices.
• Collaborate with multi-national teams and stay updated on cybersecurity trends.

Skills

IT security operations

Threat hunting

Incident response

Security by default

Tools

EDR

WAF

SOAR

Python

Go

Terraform

Job description

We are Honest, a company committed to building financial products that people truly love. Our products are designed to be fair, simple, and genuinely useful in everyday life. Our diverse team brings together people from different backgrounds who share the same goal: to create meaningful solutions that make finance better. After successfully launching our first product, we’re now in an exciting growth stage, learning fast, moving quickly, and building together as a team.

About the role:

We’re looking for a Security Operation Specialist who lives for the hunt. You won’t just be staring at a dashboard; you’ll be the operator of our defense. In a fintech environment, the stakes are high and the threats are evolving. You’ll be the go-to person maintaining the systems that keep our customers’ data safe and our environment resilient against anything the internet throws at us. If you’re passionate about threat detection, incident response, vulnerability management, and staying ahead of evolving cyber risks, we’d love to connect with you.

How you will make an impact:

Monitor and respond

• Be our first responder, managing our SOC team and SIEM/SOAR stack and turning “alerts” into “actions” by developing and fine-tuning relevant rules and playbooks
• Automate alert responses to minimize alert fatigue and response time via security workflow automations

Resolve incidents and close gaps

• Lead security incident management — from initial detection to post-mortem analysis to prevent re-occurrence
• Hunt for weaknesses in our applications and infrastructure, and close the gaps before the bad guys do

Own the security stack and standards

• Own our security solutions stack — EDR, WAF, SOAR and others — and be the subject-matter expert and internal champion for them
• Ensure organizational protocols adhere to industry best practices and regulatory frameworks
• Stay up to date with the latest cybersecurity trends, threats, and technologies to improve and contribute to our security program

What you need to have:

• Problem-solving skills to help with problem resolutions
• Technical expertise in IT security operations covering broad angles ranging from application, infrastructure, network, and cloud
• Toolbox mastery: hands-on experience with EDR, WAF, SOAR, and other security solutions
• Scripting skills: you look at security vulnerabilities and know what to do to fix them. This requires the knowledge and logic of some well-known languages, such as Python, Go, etc.
• Security by default: a “security-first” mindset that incorporates security in everything you do
• Resilience: things don’t always go smoothly. In case things fail, you know how to recover quickly and learn your lessons
• Effective communication and interpersonal skills in English to collaborate with diverse multi-national teams

What makes you stand out:

• Security certification such as OSCP, GCIA, GCIH, CISSP, or CEH
• Experience in a financial institution regulated by OJK and Bank Indonesia
• Familiarity with ISO/IEC 27001:2022 controls and supporting surveillance or certification audits
• Experience with cloud-native security tooling (GCP, AWS) and infrastructure-as-code
• Threat hunting, detection engineering, or purple-team experience
• Exposure to regulatory or external audit requests on IT security controls

Our application process:

Hiring is something we do with care. Because of that, having a transparent and thorough recruitment process is key. If you liked what you’ve read and are up for the challenge, here is what to expect after submitting your resume:

• The hiring team reviews your application
• You get invited to an initial call with the hiring team
• Onsite interviews with relevant team members
• Offer

Why you’ll love it here:

• We’re all owners; everyone at Honest gets ESOP (Employee Stock Option Plan)
• Training course and book subsidies
• You’ll be working with the smartest people in the industry

At Honest, we’re working hard to build the future of finance for Asia. To do so, we prioritize attracting the best talent worldwide to join us – regardless of their background and heritage. At Honest, we are committed to equal employment opportunities regardless of race, color, ethnicity, ancestry, religion, national origin, gender, sex, gender identity or expression, sexual orientation, age, citizenship, marital or parental status, disability, or other class protected by applicable law. We are proud to be an equal opportunity workplace. If you want to be part of changing how people access finance in Asia, join us and help us build a global company where we’re all proud to belong.