Security Consultant

Sagara Technology; Jakarta Pusat; On-site; IDR 400,000,000 - 650,000,000; Full time

Job summary

SAGARA Technology is seeking a Security Consultant in Jakarta to advise on security architecture, threat modeling, and SDLC security enhancements. You will review artifacts, assess risks, and deliver strategic remediation plans to strengthen platform security.

Candidates should have 5+ years in information security consulting or risk assessment, with knowledge of STRIDE, PASTA, DREAD, MITRE ATT&CK, and threat modeling tools, plus relevant certifications.

Qualifications

• Bachelor’s degree in Information Technology, Cybersecurity, or related field.
• Minimum 5+ years of experience in Information Security Consulting, Security Architecture, or Risk Assessment.
• Strong knowledge of threat modeling methodologies such as STRIDE, PASTA, DREAD, and MITRE ATT&CK.
• Familiarity with threat modeling tools such as Microsoft Threat Modeling Tool, OWASP Threat Dragon, or IriusRisk.
• Certifications such as CISSP, CISM, CISA, CCSP, or CDPO are an advantage.

Responsibilities

• Provide risk-based recommendations to address identified security implementation gaps.
• Provide security consultation and advisory throughout the SDLC and platform/infrastructure operations.
• Review DFDs, data flows, trust boundaries, and other security artifacts to ensure alignment with threat modeling standards.
• Develop strategic remediation plans and prioritize security risks for identified threats.
• Assess security risks and recommend mitigations based on business impact and operational requirements.

Skills

STRIDE

PASTA

DREAD

MITRE ATT&CK

Security Architecture

Risk Assessment

Data Flow Analysis

API Security

Cloud Security

SDLC Security

Education

Bachelor’s degree in Information Technology, Cybersecurity, or related field

Tools

Microsoft Threat Modeling Tool

OWASP Threat Dragon

IriusRisk

Job description

Jakarta, Indonesia Contract Mid-Senior level

About the role

As a Security Consultant, you will act as a strategic advisor in reviewing security architecture, validating threat modeling artifacts, and providing security recommendations throughout the Software Development Life Cycle (SDLC) and platform operations. You will assess security risks, prioritize identified threats, and recommend strategic remediation plans to strengthen the overall security posture of the platform.

Responsibilities

• Provide risk-based recommendations to address identified security implementation gaps.
• Provide security consultation and advisory throughout the SDLC and platform/infrastructure operations.
• Review DFDs, data flows, trust boundaries, and other security artifacts to ensure alignment with threat modeling standards.
• Develop strategic remediation plans and prioritize security risks for identified threats.
• Assess security risks and recommend mitigations based on business impact and operational requirements.

Requirements

• Bachelor’s degree in Information Technology, Cybersecurity, or a related field.
• Minimum 5+ years of experience in Information Security Consulting, Security Architecture, or Risk Assessment.
• Strong knowledge of threat modeling methodologies such as STRIDE, PASTA, DREAD, and MITRE ATT&CK.
• Familiarity with threat modeling tools such as Microsoft Threat Modeling Tool, OWASP Threat Dragon, or IriusRisk.
• Strong understanding of microservices, API gateways, large-scale system integration, and cloud-native/hybrid architectures.
• Knowledge of UU PDP No. 27/2022, ISO/IEC 27001, and NIST Cybersecurity Framework.
• Strong risk assessment and prioritization skills, with the ability to balance security effectiveness and business/operational requirements.
• Certifications such as CISSP, CISM, CISA, CCSP, or CDPO are an advantage.

Skills

STRIDE PASTA DREAD MITRE ATT & CK Security Architecture Risk Assessment & Risk Prioritization Security Design Review Data Flow Analysis Security Remediation Planning SDLC Security Cloud Security API Security

About SAGARA Technology

SAGARA Technology

Building digital products that move Indonesia forward.

SAGARA Technology is a digital product studio and software house delivering enterprise software, mobile apps, and AI-driven platforms for clients across Southeast Asia. We ship measurable outcomes with small, senior, cross-functional squads.