Security Engineer

PT IDX Solusi Teknologi Informasi; Jakarta Selatan; On-site; IDR 180,000,000 - 300,000,000; Full time

Job summary

PT IDX Solusi Teknologi Informasi mencari profesional keamanan siber untuk menjalankan tugas Red Team dan Blue Team di lingkungan on-site di Jakarta. Peran ini membutuhkan pengalaman minimal 1 tahun di cybersecurity, sertifikasi CEH adalah nilai tambah, dan kemampuan mengembangkan deteksi serta respons insiden secara efektif.

Anda akan bekerja sama dengan SOC, DevOps, IT, dan tim Engineering untuk membangun keamanan di seluruh SDLC dan infrastruktur.

Qualifications

• Gelar S1 di Informatika/ keamanan siber atau setara.
• Minimum 1 tahun pengalaman di keamanan siber dengan pengalaman ofensif dan defensif.
• Pemahaman kuat terhadap kerangka kerja pengujian penetrasi (Metasploit, Burp Suite, Kali Linux, Nmap, OWASP ZAP).
• Pengalaman alat defensif: SIEM (QRadar, FortiSIEM), IDS/IPS, EDR (CrowdStrike, Sophos), Firewall, WAF.
• Memahami MITRE ATT&CK, OWASP Top 10, NIST, ISO 27001.

Responsibilities

• Melakukan Red Team (offensive security) seperti pengujian penetrasi dan simulasi serangan.
• Melakukan Blue Team (defensive security) melalui monitoring, analisis alert SIEM/IDS/IPS/EDR, dan respons insiden.
• Mengembangkan deteksi, logika korelasi, dan otomatisasi untuk peningkatan pertahanan.
• Meneliti teknik serangan terbaru dan mekanisme pertahanan untuk menghadapi ancaman.
• Berkolaborasi dengan tim lintas fungsi (SOC, DevOps, IT, Engineering) untuk keamanan SDLC dan infrastruktur.
• Menyusun temuan dalam laporan dan memberikan panduan remediasi untuk pemangku kepentingan teknis dan non-teknis.

Skills

Penetration testing

Defensive security

Threat detection

Security automation

Cross-functional collaboration

Education

Bachelor's degree in Computer Science or related

Tools

Metasploit

Burp Suite

Kali Linux

Nmap

OWASP ZAP

QRadar

FortiSIEM

CrowdStrike

Job description

DESKRIPSI PEKERJAAN

1. Carry out Red Team (offensive security) activities such as penetration testing, vulnerability assessments, exploitation, and red team simulations to proactively identify weaknesses in applications, infrastructure, and cloud environments.

2. Perform Blue Team (defensive security) tasks including continuous monitoring of systems and networks, analyzing alerts from SIEM/IDS/IPS/EDR, and leading security incident detection and response.

3. Develop and fine-tune detection rules, correlation logic, and automation scripts to improve proactive defense and reduce response time.

4. Research latest attack techniques, exploits, and defense mechanisms to stay ahead of evolving cyber threats.

5. Collaborate with cross-functional teams (SOC, DevOps, IT, Engineering) to embed security across the SDLC and infrastructure.

6. Document findings, prepare reports, and provide clear remediation guidance for both technical and non-technical stakeholders.

KUALIFIKASI MINIMUM

1. Min. Bachelor’s degree in Computer Science, Cybersecurity, or related field (or equivalent practical experience).

2. Min. 1 years of experience in cyber security, with exposure to both offensive and defensive practices.

3. Strong knowledge of penetration testing frameworks (Metasploit, Burp Suite, Kali Linux, Nmap, OWASP ZAP).

4. Hands-on experience with defensive tools: SIEM (QRadar, FortiSIEM), IDS/IPS, EDR (CrowdStrike, Sophos), Firewalls, and WAF.

5. Solid understanding of security frameworks and methodologies (MITRE ATT&CK, OWASP Top 10, NIST, ISO 27001).

6. Having Certified Ethical Hacker (CEH) Certification is a plus.

RINGKASAN PERKERJAAN

• *SPESIALISASI**: IT and Software
• *PENDIDIKAN MINIMAL**: S1 (Sarjana)
• *SISTEM KERJA**: On-site
• *TIPE PEKERJAAN**: Full time
• *LOKASI**: South Jakarta, DKI Jakarta, Indonesia
• *INDUSTRI**: Information Technology / IT
• *SITUS PERUSAHAAN**: https://idxsti.co.id/

TENTANG PERUSAHAAN

PT IDX Solusi Teknologi Informasi (IDXSTI) was established in November 2018 as a subsidiary of Indonesia Stock Exchange (IDX) and other SRO’s KPEI and KSEI. IDXSTI was focusing on providing Information Technology (IT) services to Indonesia Capital Market Industry and other Financial Services. Our objective is to give the best IT solutions to the capital market industry in order to support the development of Indonesia Capital Market.