Security Engineer: Cloud, Penetration Testing & Secure SDLC

PHINCON; Kota Bandung; On-site; IDR 180,000,000 - 320,000,000; Full time

Job summary

PHINCON is seeking a security-focused professional to lead penetration testing and secure development efforts in Bandung. You will perform red-team simulations on internal apps, assess dependencies with CVE metrics, and craft actionable mitigation plans for management.

Ideal candidates have ISO27001 familiarity, Linux/Windows expertise, and scripting skills in Bash/Python, with cloud security experience across AWS/Azure/GCP. Cloud certs are a plus.

Qualifications

• Bachelor's degree or relevant work experience.
• Good at managing sensitive and confidential data and infrastructure.
• Familiar with ISO27001 standards.
• Proficient with Linux and Windows OS.
• Familiar with cloud security services (AWS/Azure/GCP).
• Able to create scripts in Bash or Python.
• Cloud security certification is a plus.

Responsibilities

• Penetration testing and red-teaming on internal applications to identify vulnerabilities and develop PoCs.
• Dependency analysis across applications using CVE databases and CVSS metrics.
• False positive elimination through manual reviews and exploit replication.
• Secure SDLC implementation with security reviews before production.
• Prepare detailed penetration testing reports and present to tech and management.
• Provide security governance recommendations based on CIS Controls, ISO 27001, OWASP, PTES, NIST.

Skills

Penetration testing

ISO27001 familiarity

Linux

Windows OS

Cloud security (AWS/Azure/GCP)

Scripting (bash/python)

Education

Bachelor's degree in Software Eng / CS / IT or equivalent

Job description

PHINCON is seeking a security-focused professional to lead penetration testing and secure development efforts in Bandung. You will perform red-team simulations on internal apps, assess dependencies with CVE metrics, and craft actionable mitigation plans for management.

Ideal candidates have ISO27001 familiarity, Linux/Windows expertise, and scripting skills in Bash/Python, with cloud security experience across AWS/Azure/GCP. Cloud certs are a plus.