L2 Security Operation Intern

RecruiterPal; Indonesia; On-site; IDR 150,000,000 - 280,000,000; Full time

Job summary

ALTO Network is seeking a security leader to design and implement a comprehensive security strategy aligned with business goals and regulatory requirements.

You will collaborate with cross-functional teams to embed security into the SDLC and DevOps, implement encryption and IAM solutions, and oversee CI/CD security controls. Ongoing risk audits and staff training support governance across the organization.

Qualifications

• Bachelor's degree in computer science, information technology, or related field.
• CEH or CompTIA Security+ certifications preferred.
• Minimum 1 year of experience in information security roles, IT Operations or SRE.

Responsibilities

• Develop and implement a comprehensive security strategy aligned with business goals.
• Collaborate with cross-functional teams to integrate security into SDLC and DevOps.
• Educate end-users about cybersecurity threats and promote security awareness.
• Evaluate emerging technologies to enhance security posture.
• Implement encryption for data at rest, in transit, and in use.
• Ensure secure storage and transmission of keys and certificates.
• Integrate IAM with enterprise applications and services.
• Implement CI/CD pipelines with built-in security controls and testing.
• Define security policies, standards, and procedures.
• Conduct risk/findings audits and train staff for governance.

Skills

Cybersecurity fundamentals

Python

PowerShell

Bash

SIEM

Jenkins

GitLab CI/CD

Ansible

Encryption

IAM

EDR

Threat modeling

Education

Bachelor's degree in CS/IT

Master's degree preferred

Tools

Firewalls

IDS/IPS

EDR

SIEM

PKI / Certificates

Job description

COMPANY DESCRIPTION

ALTO Network is a leading payment infrastructure provider as well as the pioneer in payment solution by always bringing the most innovative and impactful technology to connect merchants or financial institutions with their customers to grow their businesses nationwide and beyond.

RESPONSIBILITIES

• Develop and implement a comprehensive security strategy aligned with the organization's business goals and objectives.
• Collaborate with cross-functional teams to integrate security into the software development lifecycle (SDLC) and DevOps processes.Educate end-users about common cybersecurity threats, such as phishing attacks and social engineering, and promote security awareness to encourage safe computing practices.
• Evaluate emerging technologies and security solutions to enhance the organization's security posture.
• Implement encryption mechanisms to protect sensitive data at rest, in transit, and in use.
• Ensure secure storage and transmission of cryptographic keys and certificates.
• Integrate identity and access management (IAM) solutions with enterprise applications and services.
• Implement continuous integration/continuous deployment (CI/CD) pipelines with built-in security controls and testing.
• Define security policies, standards, and procedures to ensure compliance with industry regulations and best practices.
• Risk/Findings audit to be fulfilled Ensure staff are informed and trained to support good corporate governance in their specific areas of work.

QUALIFICATIONS

• Bachelor's degree in computer science, information technology, or a related field. Master's degree preferred.
• Relevant certifications (e.g , CEH, Comptia Security +) preferred.
• Minimum of 1 years of experience in information security roles, and IT Operation or SRE

Knowledge

• Cybersecurity Principles and Concepts: Understanding of foundational cybersecurity principles, including confidentiality, integrity, and availability (CIA triad).
• Security Technologies and Tools: Familiarity with a wide range of security technologies, including firewalls, intrusion detection/prevention systems (IDS/IPS), endpoint protection, encryption, secure email gateways, and security information and event management (SIEM) systems.
• Scripting and Programming: Proficiency in scripting and programming languages such as Python, PowerShell, or Bash for automation, tool development, and exploit scripting.
• Security tooling and automation frameworks : Jenkins / GitLab CI/CD / Ansible.
• Organizational security policies and procedures : endpoint security, including acceptable use policies, data handling guidelines, and incident response protocols.
• EDR solutions : provide continuous monitoring and real-time response capabilities to detect and mitigate advanced threats on endpoints.
• Patch management processes and tools : ensure that endpoints are up-to-date with the latest security patches and updates to address known vulnerabilities.Programming languages : Java / Python / C / C++ / JavaScript.

Non-Technical

• Problem-Solving
• Adaptability
• Time Management Skills

Technical

• Network protocols
• Firewalls
• Intrusion detection/prevention systems (IDPS)
• Encryption algorithms
• Digital certificates
• Endpoint detection and response (EDR)
• Endpoint management solutions
• OWASP Top 10
• Scripting and Programming: Python / PowerShell / Bash