Security Engineer

PT IDX Solusi Teknologi Informasi; Jakarta Selatan; On-site; IDR 180,000,000 - 300,000,000; Full time

Job summary

PT IDX Solusi Teknologi Informasi membuka posisi analis keamanan siber di Jakarta Selatan. Peran ini mencakup aktivitas offensive dan defensive untuk mengidentifikasi kelemahan, memantau sistem, serta menindaklanjuti insiden secara proaktif.

Anda akan mengembangkan aturan deteksi, skrip otomasi, dan dokumentasi temuan. Diharapkan memiliki pengalaman 1 tahun di bidang keamanan siber dan sertifikasi CEH menjadi nilai tambah.

Qualifications

• Min. 1 year experience di keamanan siber dengan exposure pada offense dan defense.
• Pemahaman kuat terhadap framework keamanan (MITRE ATT&CK, OWASP Top 10, NIST, ISO 27001).
• CEH certification diutamakan.

Responsibilities

• Melakukan aktivitas Red Team (pentest, vulnerability assessment, eksploitasi, simulasi red team).
• Menangani Blue Team: monitoring berkelanjutan, analisis alert SIEM/IDS/IPS/EDR, respons insiden.
• Kembangkan deteksi, logika korelasi, dan skrip otomatisasi untuk pertahanan proaktif.
• Riset teknik serangan terbaru untuk meningkatkan pertahanan.
• Bekerja lintas tim (SOC, DevOps, IT) untuk integrasi keamanan di SDLC.
• Dokumentasikan temuan, buat laporan, dan berikan panduan remediation.

Skills

Penetration testing

Defensive security

Threat detection

Security incident response

Security automation

Education

Bachelor's degree in Computer Science or Cybersecurity

CEH Certification (plus)

Tools

Metasploit

Burp Suite

Kali Linux

Nmap

OWASP ZAP

QRadar/FortiSIEM

CrowdStrike

SOPHOS

Job description

DESKRIPSI PEKERJAAN

1. Carry out Red Team (offensive security) activities such as penetration testing, vulnerability assessments, exploitation, and red team simulations to proactively identify weaknesses in applications, infrastructure, and cloud environments.

2. Perform Blue Team (defensive security) tasks including continuous monitoring of systems and networks, analyzing alerts from SIEM/IDS/IPS/EDR, and leading security incident detection and response.

3. Develop and fine-tune detection rules, correlation logic, and automation scripts to improve proactive defense and reduce response time.

4. Research latest attack techniques, exploits, and defense mechanisms to stay ahead of evolving cyber threats.

5. Collaborate with cross-functional teams (SOC, DevOps, IT, Engineering) to embed security across the SDLC and infrastructure.

6. Document findings, prepare reports, and provide clear remediation guidance for both technical and non-technical stakeholders.

KUALIFIKASI MINIMUM

1. Min. Bachelor’s degree in Computer Science, Cybersecurity, or related field (or equivalent practical experience).

2. Min. 1 years of experience in cyber security, with exposure to both offensive and defensive practices.

3. Strong knowledge of penetration testing frameworks (Metasploit, Burp Suite, Kali Linux, Nmap, OWASP ZAP).

4. Hands-on experience with defensive tools: SIEM (QRadar, FortiSIEM), IDS/IPS, EDR (CrowdStrike, Sophos), Firewalls, and WAF.

5. Solid understanding of security frameworks and methodologies (MITRE ATT&CK, OWASP Top 10, NIST, ISO 27001).

6. Having Certified Ethical Hacker (CEH) Certification is a plus.

RINGKASAN PERKERJAAN

• *SPESIALISASI**: IT and Software
• *PENDIDIKAN MINIMAL**: S1 (Sarjana)
• *SISTEM KERJA**: On-site
• *TIPE PEKERJAAN**: Full time
• *LOKASI**: South Jakarta, DKI Jakarta, Indonesia
• *INDUSTRI**: Information Technology / IT
• *SITUS PERUSAHAAN**: https://idxsti.co.id/

TENTANG PERUSAHAAN

PT IDX Solusi Teknologi Informasi (IDXSTI) was established in November 2018 as a subsidiary of Indonesia Stock Exchange (IDX) and other SRO’s KPEI and KSEI. IDXSTI was focusing on providing Information Technology (IT) services to Indonesia Capital Market Industry and other Financial Services. Our objective is to give the best IT solutions to the capital market industry in order to support the development of Indonesia Capital Market.