SDET I (Security)

PT mHealthBank Rising Care; Jakarta Selatan; On-site; IDR 200,880,000 - 357,120,000; Full time

Job summary

Halodoc is seeking an SDET - 1 (Security) to design, implement, and improve security controls across AWS, Kubernetes (EKS), applications, databases, and endpoints. The role focuses on threat detection engineering, monitoring, incident response, and vulnerability management to protect sensitive patient data.

Collaborate with Security Operations, DevOps, Platform Engineering, and Infrastructure teams to detect threats, respond to incidents, and implement proactive security controls while

Qualifications

• Experience with security operations and incident handling.
• Knowledge of cloud security controls and governance.
• Familiarity with SIEM platforms and log analysis.
• Basic scripting in Python or Bash is desirable.

Responsibilities

• Support daily security operations across AWS, Kubernetes, apps, databases, endpoints, and network environments.
• Monitor alerts from OpenSearch/ELK, AWS GuardDuty, Security Hub, CloudTrail.
• Investigate security events and escalate incidents when needed.
• Assist in implementing security controls across cloud services and IAM.
• Support vulnerability management activities and remediation tracking.
• Maintain security dashboards and detection rules.
• Perform routine security reviews of IAM, configurations, and S3 permissions.
• Assist with incident response by collecting logs and documenting findings.

Skills

Threat detection

Security monitoring

Incident response

Cloud security

IAM & access control

Networking fundamentals

Tools

OpenSearch

ELK Stack

AWS GuardDuty

Security Hub

CloudTrail

Kubernetes (EKS)

CrowdStrike Falcon

S3

CloudWatch

Job description

The SDET - 1 (Security) at Halodoc is responsible for designing, implementing, and continuouslyimproving security controls across Halodoc's AWS cloud infrastructure, Kubernetes (EKS)environments, applications, databases, endpoints, and enterprise systems. As a healthcaretechnology company handling highly sensitive patient information, prescriptions, and consultationdata, protecting confidentiality, integrity, and availability is a top priority.

This role focuses on strengthening Halodoc's security posture through threat detection engineering,security monitoring, incident response, cloud security, vulnerability management, and securityautomation. The engineer collaborates closely with Security Operations, DevOps, PlatformEngineering, Infrastructure, and Application teams to detect threats, respond to incidents, improvevisibility, and implement proactive security controls.

Key Responsibilities

• Support daily security operations across AWS cloud infrastructure, Kubernetes (EKS),applications, databases, endpoints, and network environments.
• Monitor and investigate security alerts generated by OpenSearch/ELK, AWS GuardDuty,Security Hub, CloudTrail, endpoint protection platforms, and other security tools.
• Perform initial investigation and validation of security events, determine potential impact,and escatel incidents when necessary.
• Assist in implementing and maintaining security controls across AWS services,Kubernetes clusters, IAM, S3, and cloud workloads.
• Support vulnerability management activities, including validating findings, coordinatingremediation with engineering teams, and tracking remediation progress.
• Assist in maintaining security dashboards, detection rules, and monitoring configurationsunder the guidance of senior security engineers.
• Perform routine security reviews, including IAM permissions, cloud configurations,security group rules, S3 bucket permissions, and compliance checks.
• Support incident response activities by collecting logs, preserving evidence,documenting findings, and assisting with remediation efforts.
• Maintain accurate documentation, runbooks, standard operating procedures, andincident records in Jira or other ticketing platforms.
• Work closely with DevOps, Platform Engineering, Infrastructure, and Application teamsto support secure cloud deployments and operational improvements.
• Participate in on-call support and assist during security incidents when required.
• Continuously learn new security technologies, cloud services, and defensive securitypractices.

Knowledge and Skills Required

• Basic understanding of SIEM platforms such as OpenSearch, ELK Stack, Splunk,Microsoft Sentinel, or similar.
• Familiarity with AWS security services including GuardDuty, Security Hub, CloudTrail,AWS Config, S3, and CloudWatch.
• Understanding of Identity and Access Management (IAM), privileged access, and leastprivilege principles.
• Knowledge of Security Information and Event Management (SIEM) platforms such asOpenSearch, ELK, Splunk, or Microsoft Sentinel.
• Knowledge of Linux and Windows administration fundamentals.
• Understanding of networking concepts including TCP/IP, DNS, HTTP/HTTPS, firewalls,VPNs, and common network protocols.
• Familiarity with log analysis and security event investigation.
• Hands-on experience in working with AI native workloads, securing AI agents, MCPservers, and creating new AI security skills.
• Basic scripting knowledge in Python or Bash is desirable.
• Knowledge of endpoint security solutions such as CrowdStrike Falcon, Manage Engine.
• Understanding of security principles including least privilege, defense in depth, andsecure configuration practices.