SDET I (Security)

Halodoc is looking for a Cybersecurity Engineer to strengthen our defensive security operations. This role focuses on security monitoring, Google Workspace security administration, and IAM automation, covering user lifecycle management, SSO integration, and access review enforcement to enhance security posture and operational efficiency.

We're seeking a security enthusiast eager to deepen their expertise—leveraging automation to reduce recurring security gaps, integrating emerging technologies for detection and response, and strengthening blue team operations. If you thrive on tackling security challenges, working with cutting-edge tools, and collaborating to enhance defense strategies, this role is for you.

About This Role:

Halodoc is looking for a Cybersecurity Engineer to strengthen our defensive security operations. This role focuses on security monitoring, Google Workspace security administration, and IAM automation, covering user lifecycle management, SSO integration, and access review enforcement to enhance security posture and operational efficiency.

We're seeking a security enthusiast eager to deepen their expertise—leveraging automation to reduce recurring security gaps, integrating emerging technologies for detection and response, and strengthening blue team operations. If you thrive on tackling security challenges, working with cutting-edge tools, and collaborating to enhance defense strategies, this role is for you.

• 1-3 years of experience in cybersecurity, security operations, IAM, or blue team activities.
• Hands-on experience with SIEM, EDR, and DLP solutions.
• Knowledge of Google Workspace security controls, including DLP policies, access management, security investigation tools, and advanced phishing protection.
• Familiarity with IAM automation using Python, Terraform, or Google Apps Script.
• Solid coding skills and a passion for security engineering.
• Excellent written and verbal communication skills, with the ability to articulate complex security concepts clearly.
• A proactive mindset and self-driven approach to problem-solving in a remote environment.

• Monitor and analyze security alerts from SIEM, AWS security tools, EDR, DLP, and Email Security solutions.
• Investigate user security issues by analyzing logs and product behavior, proposing improvements for faster detection and containment of similar threats.
• Enhance detection rules, fine-tune alerting mechanisms, and automate security workflows to improve efficiency.
• Utilize threat intelligence and real-time CVE tracking to enhance detection capabilities, mitigate emerging threats, and refine security policies.
• Manage security settings, access controls, and DLP policies in Google Workspace.
• Automate IAM workflows, including user lifecycle management, SSO app integration, and access review enforcement.

• Knowledge of AWS security tools (e.g., Security Hub, GuardDuty, WAF, IAM Analyzer).
• Experience with Email Security solutions and Security Threat Intelligence Platforms.
• Security certifications like Security+, GSOC, AWS or GCP cloud security certification is a plus.