IT Security/ SOP Specialist

KPN Corporation; Jakarta Pusat; On-site; IDR 288,000,000 - 504,000,000; Full time

Job summary

KPN Corporation in Jakarta is seeking an experienced IT Security professional to conduct vulnerability assessments, pen testing, and threat hunting across on-premises and cloud environments. You will manage firewalls, supervise EDR operations, and contribute to incident response and security policy improvements.

The role requires strong knowledge of Linux/Windows server environments, OWASP standards, and relevant security certifications, with hands-on security operations experience and

Qualifications

• Graduated from University with major in IT or Cyber Security, with 4–5 years in IT and 2–3 years in IT Security Operations (Red/Blue Team).
• Hands-on experience with Linux and Windows OS Servers; familiarity with OWASP standards, web technologies, APIs, and security best practices.
• Good analytical and problem-solving skills and ability to work under pressure both independently and in a team.
• Balance of knowledge and hands-on experience across networks infra, systems admin, servers OS, endpoint protection, web technologies, scripting, databases and cloud environments.
• Certifications in IT Network (CCNA, MTCNA), Security (CEH, PCNSE, CCNA Security), IT Audit (CISA) are advantageous.
• Knowledge and hands-on in SIEM, event/log monitoring, SOAR and security workflows are advantageous.

Responsibilities

• Conduct regular Vulnerabilities Assessment & Penetration Testing for all Corporate On premises infrastructures and Cloud and generate report in general or specific purposes as requested.
• Manage and administer Next Generation Firewall devices together with Network and System Team in Head Office, Sites and Remote Offices and conduct Best Practices Assessment (BPA) and Security Lifecycle Review (SLR)
• Manage and conduct day to day monitor and operation of EDR (Endpoint Detection Response) for threat hunting, ransomware/malware prevention, cryptomining and other malicious activities.
• Prepare, review and update IT Security Standard Documents Preparations (Incident Response, SOC Procedures, Internet Policy, etc) and control the implementation
• Involve in company internal and external audit process to ensure the result are effectives and remediation actions are carried out accordingly.
• Maintain and monitor SIEM and Security Automation to proactively identify security issues and actively participate in threat hunting discoveries.

Skills

Vulnerability assessment

Penetration testing

Threat hunting

EDR management

SIEM

Firewall management

Incident response

Security automation

Audit participation

Linux/Windows admin

OWASP

Cloud security

Education

Bachelor's degree in IT or Cyber Security

CCNA

CEH

PCNSE

CISA

Tools

Linux

Windows OS

Next-Generation Firewall

EDR

SOAR

SIEM

Job description

2 - 3 Years

Job Description

• Conduct regular Vulnerabilities Assessment & Penetration Testing for all Corporate On premises infrastructures and Cloud and generate report in general or specific purposes as requested.
• Manage and administer Next Generation Firewall devices together with Network and System Team in Head Office, Sites and Remote Offices and conduct Best Practices Assessment (BPA) and Security Lifecycle Review (SLR)
• Manage and conduct day to day monitor and operation of EDR (Endpoint Detection Response) for threat hunting, ransomware/malware prevention, cryptomining and other malicious activities.
• Prepare, review and update IT Security Standard Documents Preparations (Incident Response, SOC Procedures, Internet Policy, etc) and control the implementation
• Involve in company internal and external audit process to ensure the result are effectives and remediation actions are carried out accordingly.
• Maintain and monitor SIEM and Security Automation to proactively identify security issues and actively participate in threat hunting discoveries.

  Qualifications

  . Graduated from University with Major in IT or Cyber Security or related fields and having experiences in in IT 4-5 years and in IT Security Operation for 2-3 years as Red Team or Blue Team. Hands-on experiences in Linux and Windows O/S Servers Environment and Familiarity of OWASP Standard, Web Technologies, API’s and security best practices.

  . Good analytics and problem solving skills and ability to work under pressure independently and as a team.

  . Having balance of knowledge and hands-on experiences of Networks Infra, System Admin, Servers O/S, Endpoint protection, Web Technologies, Scripting/Coding skills, Database and Cloud Environment will be an advantage.

  . Having Certification in IT Network ( CCNA, MTCNA), Security (CEH, PCNSE, CCNA Security), IT Audit (CISA) will be an advantage.

  . Knowledge and Hands-on experiences in SIEM, Event and Log monitoring, SOAR and Security Workflow will be an advantage.

Job Snapshot

Updated Date

20-09-2023

Job ID

JOB2

Unit

IT Services & Security

Location